arstechnica.com – With a valid TLS certificate, faux Bravė.com could fool even security-savvy people.
Tweeted by @infosecstuff https://twitter.com/infosecstuff/status/1421740469927792643
With help from Google, impersonated Brave.com website pushes malware