333 Tor exit nodes hijacked to intercept SSH and email
A total of 333 Tor exit nodes were compromised for 3 days this month, aiming to intercept SSH traffic and retrieve plaintext emails.
Stock photo for illustration only, not from the actual event
- 333 Tor exit nodes were hacked over a 3-day period this month
- The primary objective was to intercept SSH traffic and steal data
- Compromised data included unencrypted plaintext emails
The global privacy network Tor faced a significant security incident as reports revealed that 333 exit nodes were successfully hijacked by malicious actors. This coordinated breach persisted continuously for three full days this month.
Stock photo for illustration only, not from the actual event
This attack vector was deliberately structured to target and harvest sensitive user data. The attackers specifically focused on intercepting Secure Shell (SSH) traffic connections, which are typically utilized for remote server administration and network management.
In addition to capturing SSH traffic, the perpetrators leveraged the compromised nodes to access and retrieve email communications transmitted in plaintext format without additional encryption, leaving private messages vulnerable to theft.
The hijacking of Tor exit nodes highlights inherent structural vulnerabilities within decentralized anonymity networks. While Tor excels at concealing user identity through multi-layer encryption, control over the final exit node exposes unencrypted traffic that lacks end-to-end protection. Users must rely on application-layer encryption rather than assuming network-level routing alone guarantees complete security.
Source: Ars Technica
Found something wrong in this article? Report an issue with this article
Comments
Leave a Comment