Attackers Hijacked Over 300 Tor Exit Relays to Intercept SSH Connections

Overview

Attackers took control of more than 300 Tor exit relays in early October and used them to redirect SSH connections to servers that stole login passwords, a researcher found. Exit relays are the last hop in a Tor circuit, where traffic leaves the network for its destination. Only a password login to an SSH server made through Tor between October 1 and 5, after accepting the interception

SpinGraph analysis pending — check back after processing.