Domains for which fraudulent security certificates were issued includes CIA, MI6, Facebook, Microsoft, Skype, and Twitter. Spying on Iranian dissidents may have been the hackers' goal.

More...