Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

More than 300 Tor Exit nodes were hacked

@forest important news don't miss

So, quick summary of what happened:

The hacker interfered with more than 300 exit nodes of the Tor network, gaining the ability to intercept SSH connections and unencrypted user traffic.

Hacked nodes were infected with Ebury 1.8.3 malware, and the attacker himself changed the settings of the output nodes in such a way that more unencrypted traffic passed through them.

The Tor team officially confirmed this incident on October 5. The initial method of penetration and the identity of the hacker remain unknown. All hacked nodes were blacklisted and no longer available.

Sources - one and two

Difficult times.

Comments

  • tommy1412tommy1412 Veteran

    Fvck
    Hacking news appear more than deals drop...

    Thanked by 1neighhouse
  • lovelyserverlovelyserver Member
    edited 10:56AM

    This is baaaad.

    We definitely need more 7/y deals for our own vpn

  • dbadudedbadude Member

    ssh over tor is lame

  • I wonder what was the common vector for those 300 nodes.
    Same provider? Unpatched RCE in some service or monitoring software?

    Finding it hard to believe it was an issue with the Tor daemon itself.

  • jsgjsg Member, Resident Benchmarker

    @forest

    Can we get your view on that, please?

    Thanked by 1itzsenu
  • LeviLevi Veteran

    @forest dude, important news, don't miss.

  • itzsenuitzsenu Member

    @jsg said: Can we get your view on that, please?

    I think he's busy managing all of them now. Maybe that's why he hasn't been as active lately.

    Thanked by 1stable_genius
  • @luckypenguin said:
    I wonder what was the common vector for those 300 nodes.
    Same provider? Unpatched RCE in some service or monitoring software?

    Finding it hard to believe it was an issue with the Tor daemon itself.

    well i can't see the blacklisted 300 tor relays (maybe there's a node list?)

Sign In or Register to comment.