Sygma Bank website

izools

ElkyElky wrote: »

I fail to see what DNS has got to do with security certificates, given that the security certificate is installed on the web server, not the name server.

Haven't read the whole thread yet, but an expired certificate can be par of, or exploited by a method of compromising a website or personal data by way of false / altered DNS records, amongst other things.

It may have been a symptom of the A-Record for https://www.my-oam.co.uk being directed to the IP of a Phishing site.

You wouldn't be able to tell as the URL in the address bar would still be https://www.my-oam.co.uk

Unlikely, and there are other similiar methods that take advantage of other vulnerabilities further down the line that would not be visible to the end user.

At the end of the day there's no way to be 100% sure that any site with a security certificate error hasn't been compromised by one of these "transparent" methods of compromising a site