Turkish Registrar Enabled Phishers to Spoof Google
Summary: Google and Microsoft warned of active phishing attacks after Chrome detected an unauthorized *.google.com digital certificate on Dec. 24, 2012, issued through an intermediate CA linked to Turkish certificate authority TURKTRUST. TURKTRUST said it had mistakenly issued two intermediate CA certificates in August 2011 to organizations that should have received regular SSL certificates, and Microsoft said one subsidiary CA (*.EGO.GOV.TR) was used to issue the fraudulent Google certificate affecting all supported Windows releases.
Key Takeaway: An intermediate CA certificate carries the full authority of the CA, so whoever holds one can mint a valid certificate for any site they wish to impersonate - and this one may have been usable in the wild for well over a year before it was caught.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026