
Attackers hijacked 300-plus Tor exits to steal SSH passwords
Only password SSH logins over Tor from October 1 to 5 that accepted a fake host key could be captured.
2 stories, newest first · one card per story

Only password SSH logins over Tor from October 1 to 5 that accepted a fake host key could be captured.

More than 330 relays were infected from October 2 to 5 to sniff SSH and downgrade email before Tor blocklisted them.
Today 2.2K readers · 2.7K views · 401 reads · all time 108K views