New on LowEndTalk? Please Register and read our Community Rules.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
More than 300 Tor Exit nodes were hacked
JohnFilch123
Member
in Security
@forest important news don't miss
So, quick summary of what happened:
The hacker interfered with more than 300 exit nodes of the Tor network, gaining the ability to intercept SSH connections and unencrypted user traffic.
Hacked nodes were infected with Ebury 1.8.3 malware, and the attacker himself changed the settings of the output nodes in such a way that more unencrypted traffic passed through them.
The Tor team officially confirmed this incident on October 5. The initial method of penetration and the identity of the hacker remain unknown. All hacked nodes were blacklisted and no longer available.
Difficult times.
Comments
Fvck
Hacking news appear more than deals drop...
This is baaaad.
We definitely need more 7/y deals for our own vpn
ssh over tor is lame
I wonder what was the common vector for those 300 nodes.
Same provider? Unpatched RCE in some service or monitoring software?
Finding it hard to believe it was an issue with the Tor daemon itself.
@forest
Can we get your view on that, please?
@forest dude, important news, don't miss.
I think he's busy managing all of them now. Maybe that's why he hasn't been as active lately.
well i can't see the blacklisted 300 tor relays (maybe there's a node list?)
Yeah, I've been noticing his absence too. I was sure something unusual was happening.
People these days are using setups that are too complicated, setups they will never be able to fully understand and that puts us all in danger.
Simple is not only simpler, it is also more secure. If you can't understand it then you're vulnerable.
When you rely on development stacks that are too big and convoluted you gain more power but you also make yourself and other people easier targets, you get hacked. INEVITABLY.
It will only get worse.
Nah, he is busy installing crypto miners on php servers.