Post #1179866
2026-04-08 22:58 UTC
When connected devices visited the selected domains, their connections were proxied through malicious servers before reaching their intended destination.
These adversary-in-the-middle servers used self-signed certificates. When the end user clicked through browser warnings, the servers captured all traffic passing through them.
🙈🙈🙈
We really, really, really need to teach people to read error messages, particularly certificate warnings, and not click “accept” at the drop of a hat.
Replies (2)
-
@feannag@sh.itjust.works 2026-04-09 03:10
It would help if plenty if public services, government websites, and even large companies could actually sort out their certificates so it didn’t happen all the time on actual official websites.
-
@reddig33@lemmy.world 2026-04-09 01:46
That would require public education and critical thinking. Something the US seems to be getting rid of. We don’t even have PSAs anymore. en.wikipedia.org/…/Public_service_announcement