Phishing sites are deploying freely available TLS certificates in order to dupe victims into thinking they’re visiting a safe site.
Source: Threadpost