A bit more details from Microsoft:
"TURKTRUST Inc. incorrectly created two subsidiary Certificate Authorities:
(*.EGO.GOV.TR and e-islam.kktcmerkezbankasi.org).
The *.EGO.GOV.TR subsidiary CA was then used to issue a
fraudulent digital certificate to *.google.com."
http://blogs.technet.com/b/msrc/archive/2013/01/03/security-...