Microsoft: Google and Yahoo domains are fake domains

Η ecosystem he published a security advisory entitled "Inadequate digital certificates issued could allow forgery" or in English "Improperly Issued Digital Certificates Could Allow Spoofing". The company has chosen this way to announce the countermeasures they are taking for the circulation of fake domains from the certification authority of the National Information Center (NIC), a service of the Government of India.

Microsoft google yahoo phishing

Discover more articles in search results.

For unexplained reasons, the NIC in California has released a number of Google domains that allow for forgery and man-in-the-middle attacks if a program trusts the certificates. Google explained that their own products do not trust the Indian Certification Authority (CCA) auditor. Continuing with Google, it drops the ball to Microsoft, indicating that the Trusted Root Store includes CCA on trusted certificates.

The Microsoft vendor reports that her service has trusted the certificates to date to update the Trusted Root Store list for all supported versions of Windows. Note that this means that users still using Windows XP are at risk.

The Microsoft Bulletin lists the domains that were issued illegally. There are Google's 17 domains such as: google.com, m.gmail.com and gstatic.com and 27 domains such as Yahoo!, Yahoo!, Yahoo! and Yahoo!. Finally, fake domain is also static.com, a PaaS cloud (Platform as a Service).


Google preferences

Leave a Comment

Your email address is not published. Required fields are mentioned with *

Your message will not be published if:
1. Contains insulting, defamatory, racist, offensive or inappropriate comments.
2. Causes harm to minors.
3. It interferes with the privacy and individual and social rights of other users.
4. Advertises products or services or websites.
5. Contains personal information (address, phone, etc.).