Exploit
exploit:rogue_certificates
Also: fake certificates, mis-issued certificate
Fraudulent certificates issued in trusted domains, including Google.com and cia.gov, to support impersonation and interception.
Fraudulent certificates issued in trusted domains, including Google.com and cia.gov, to support impersonation and interception.
“The intruder is able to issue a bunch of rogue certificates in the names of a whole variety of different domains.”
“The big one that comes up are the Google.com certificates”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | CONTAINS | DigiNotar breach | Explicit | 3 |
DigiNotar breach CONTAINS rogue certificates
The breach resulted in the intruder issuing many rogue certificates, including certificates for Google domains.
Explicit Confidence 99% · Josephine Wolff EP 3 Details
“The intruder is able to issue a bunch of rogue certificates in the names of a whole variety of different domains.”