Hackers breach ccTLD registries, hijack Google domains via rogue HTTPS certs

Threat actors compromised third-party operators of ccTLDs for Ghana, American Samoa, and Sierra Leone, altering authoritative DNS records to hijack Google domains and obtain unauthorized HTTPS certificates. The incident underscores systemic risks in the global DNS infrastructure, with potential for large-scale traffic interception and credential theft. Scope and attribution remain unclear.