Hackers hijacked 333 Tor exit nodes to intercept unencrypted email and SSH traffic, exposing a critical security flaw that compromises user privacy and data integrity.
AI-generated summary. Check the original reporting for context and accuracy.
This is the available feed excerpt, which may be shortened or in the publisher’s original language.
Unknown hackers hijacked more than 300 Tor exit nodes and reconfigured them to favor unencrypted email traffic and redirect SSH connections through servers they controlled, a researcher reported Tuesday. The hijacking began in late August, when according to Tor volunteers, the attacker used a valid password that had been reused to gain access to a Tor management server. The attacker then installed Ebury, a backdoor written for Linux that was discovered 12 years ago. Mysteries remain Then the attacker connected from the management server to a second Tor server, called Switzerland2, through SSH, using an RSA key that, for unknown reasons, investigators couldn’t find among Switzerland2’s authorized keys. With administrative control of Switzerland2, the attackers installed Ebury there as well. Finally, the attacker reconfigured settings on two exit nodes that Switzerland2 hosted.Read full article Comments
An automated sorting aid based on source trust, keywords, and entities, on a scale of 1–12. High: 9–12; medium: 6–8; low: 1–5. It does not measure urgency, verify reporting, or indicate editorial endorsement.
Apple’s new "Made for iPhone Duo" badge helps users identify apps optimized for the foldable’s dual screens, ensuring a better experience on the device.
Atari is shutting down the VCS software store in 2027, ending a decade-long saga of delays and name changes for its retro console.
DeepSeek's massive $15 billion raise immediately following US security bans highlights the escalating tech rivalry and China's determination to fund its AI sector despite Western restrictions.