Attackers took control of more than 300 Tor exit relays in early October and used them to redirect SSH connections to servers that stole login passwords, a researcher found.
Exit relays are the last hop in a Tor circuit, where traffic leaves the network for its destination. Only a password login to an SSH server made through Tor between October 1 and 5, after accepting the interception
This is a companion discussion topic for the original entry at https://thehackernews.com/2026/10/attackers-hijacked-over-300-tor-exit.html