Submitted via IRC for Fnord666_
Attackers bypass HTTPS encryption protection by registering new TLS certificate.
Source: https://arstechnica.com/information-technology/2017/12/hackers-steal-security-firms-secret-data-in-brazen-domain-hijack/ [arstechnica.com]