The Problem With Domain Control Verified SSL Certificates

The attackers hijacked the BGP routes. They then were able to use that to get a TLS certificate for the host name. And so they basically posted their own version of a smart contract or whatever, and that caused all this money to move wherever they wanted it to. The odds are that a lot of that $235,000 was going to leave those people's pockets one way or another before much longer.