333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email
Summary
Hackers compromised over three hundred Tor exit nodes by using a reused password to access a management server. The attackers manipulated the network traffic to intercept unencrypted emails and redirect secure shell connections through servers under their control.
Unknown hackers hijacked more than 300 Tor exit nodes and reconfigured them to favor unencrypted email traffic and redirect SSH connections through servers they controlled, a researcher reported Tuesday. The hijacking began in late August, when according to Tor volunteers, the attacker used a valid password that had been reused to gain access to a Tor management server. The attacker…
Source: Read the full story at Ars Technica - All content