SSL certificates for Google services were hacked.

Hackers have compromised SSL certificates used by Google for its services. The compromised certificate was issued by DigiNotar. Users have already been harmed as a result of using these certificates.

Using fake certificates, it is possible to organize a man-in-the-middle attack, as a result of which users are redirected to fake pages, and attackers gain access to user logins and passwords.

As a result of the hack, browsers perceived secure HTTPS sessions as valid and SSL certificates as authentic, so they did not display invalid certificate messages. Experts believe the attackers may have generated multiple certificates for different browsers. The company that issued the certificate has already revoked it.

Let us remember that SSL certificates allow the browser to verify the authenticity of the website being viewed, as well as to prevent data interception.

This isn't the first instance of SSL certificate theft. Theft is particularly dangerous, as compromising just one certificate can lead to the generation of additional fake certificates. Furthermore, experts believe that fake certificates can be used on various websites for extended periods of time without being detected.