Roundup: Tor exit hijacks, Heartbreaker ransomware, and platform breaches
A researcher says 333 Tor exits, about a tenth of them, captured SSH passwords and tried to plant Ebury.
Stories per day · 30 days
Relatedtor7credential-theft5exit-nodes4ssh3exit-relays2linux2openssh2apt281email-interception1macos1man-in-the-middle1mitm1ransomware1traffic-interception1
3 stories, newest first · one card per story
Stories tagged #ebury
333 Tor exit nodes hijacked to intercept SSH and email
Attackers reused a password, installed the Ebury backdoor, and sent port-22 SSH to 12 servers from October 2 to 5.
Attacker hijacks over 10% of Tor exit relays with Ebury
More than 330 relays were infected from October 2 to 5 to sniff SSH and downgrade email before Tor blocklisted them.