• login.live.com
• mail.google.com
• www.google.com
• login.yahoo.com (3 certificates)
• login.skype.com
• addons.mozilla.org
• "Global Trustee"
Zdroj: https://www.microsoft.com/technet/security/advisory/2524375.mspx
Nektere IP adresy z utoku pochazeji z Iranu - to ale samozrejme vubec neznamena, ze to delal Iran, MOIS (SAVAMA/SAVAK) urcite znaji TOR, protoze ho sami blokovali na zaklade detekce Diffie-Hellman handshake:
https://www.eff.org/deeplinks/2011/03/iranian-hackers-obtain-fraudulent-https
Vyjadreni Comodo:
https://www.comodo.com/Comodo-Fraud-Incident-2011-03-23.html