Hackers obtained unauthorised security certificates for several Google domain names, and for other major online brands, by seizing control of the systems that manage country-level internet suffixes. According to a Google statement, the attack affected three suffixes: .gh for Ghana, .sl for Sierra Leone, and .as for American Samoa.
Google said it had updated the Chrome browser to block all the unauthorised certificates it identified, and worked with the authorities that issued them to revoke the certificates tied to its domains.
The company did not disclose which of its domains were affected, how many certificates were issued, or which other organisations were involved.
