CTI · reviewed · 2026-10-08

Hackers obtain counterfeit TLS certificates for Google and other large services

Full story & timeline

MITRE ATT&CK

• T1584 Compromise Infrastructure Resource Development
• T1649 Steal or Forge Authentication Certificates Credential Access

Indicators

No curated indicators tied to this case.

Detections

No detection content yet — case analysis did not yield signal-specific telemetry. Check back after the next daily CTI pass.

References

• https://arstechnica.com/security/2026/10/hackers-obtain-counterfeit-tls-certificates-for-google-and-other-large-services/
• https://www.bleepingcomputer.com/news/security/hackers-hijack-google-domains-after-breaching-cctld-registries/
• https://zubiqo.com/news/attackers-hijack-three-national-domain-registries-to-forge-google-https-certificates-g0oa2v