Fake certificate puts Gmail users at risk

A fake web certificate has been circulating for nearly two months, allowing hackers to steal passwords and data from Google sites.