We noticed that one of our authentication subdomains has an invalid cert error when trying to access it. We've noticed a malicious domain on these 2 certs here:
https://crt.sh/?id=18434517670 https://crt.sh/?id=18234404721
Firebase Hack Going On?
1–2 of 2 posts
Re: Firebase Hack Going On?
#2Firebase is using SAN (multi-domain) certificates, with many domains and subdomains in one cert.
https://chatgpt.com/share/689bb016-d000-8009-b7b8-354f0bb2ce...