Hackers hijack domains and obtain fake Google certificates
The attack affected organizations using the .GH, .AS, and .SL domains, but Google said its own systems were not compromised.
In brief: Citrix patches a new 0Day in NetScaler, a vulnerabilty in Atlassian Data Center exploited in the wild; and more.
The attack affected organizations using the .GH, .AS, and .SL domains, but Google said its own systems were not compromised.
Authorities estimate that the operation obtained more than 86,000 working device credentials across 194 countries.
The attacks began about two hours after additional technical details of the vulnerability were made public.
The fake websites claim to help advertisers plan campaigns, find buyers, and manage advertising budgets.
Attackers injected malicious JavaScript into legitimate websites that could display a fake Cloudflare verification page.
Google said most of the recent automated submissions were invalid, making it harder for security teams to process legitimate reports.