It is absolutely mind-blowing how creative these cybercrooks are getting nowadays. Seriously, hijacking entire country registries just to snatch HTTPS certificates for Google, YouTube, and a bunch of other massive global brands and services is next-level wild.
The attackers didnt even need to breach Google directly. They just messed with the authoritative DNS records for domain extensions in Ghana, Sierra Leone, and American Samoa, which tricked major certificate authorities into handing over real, valid security certs. Google managed to block and revoke everything pretty fast through Chrome and CRLSets, but man, the sheer nerve of these hackers is just insane. You really cant let your guard down for a single second anymore.
Source: r/StopBadBots · by /u/siterightaway