Skip to content
securitytabs

Covered by 2 outlets — first reported by The Hacker News, Oct 21, 10:30 UTC

Attackers Hijacked Over 300 Tor Exit Relays to Intercept SSH Connections

In brief

Attackers took control of more than 300 Tor exit relays in early October and used them to redirect SSH connections to servers that stole login passwords, a researcher found. Exit relays are the last hop in a Tor circuit, where traffic leaves the network for its destination. Only a password login to an SSH server made through Tor between October 1 and 5, after accepting the interception

From The Hacker News's coverage.

Continue reading

2 outlets, in the order they reported it.

  1. The Hacker NewsFirst report

    Attackers Hijacked Over 300 Tor Exit Relays to Intercept SSH Connections

    Attackers took control of more than 300 Tor exit relays in early October and used them to redirect SSH connections to servers that stole login passwords, a researcher found.

    Read at The Hacker News Details

  2. Ars Technica Security

    333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email

    Unknown hackers hijacked more than 300 Tor exit nodes and reconfigured them to favor unencrypted email traffic and redirect SSH connections through servers they controlled, a researcher reported Tuesday.

    Read at Ars Technica Security Details

Explained

The technology and terms in this story. Learn more