Attackers Hijacked Over 300 Tor Exit Relays to Intercept SSH Connections
Oct 21, 2026, 10:30 AM · by The Hacker News
Attackers took control of more than 300 Tor exit relays in early October and used them to redirect SSH connections to servers that stole login passwords, a researcher found.
Exit relays are the last hop in a Tor circuit, where traffic leaves the network for its destination. Only a password login to an SSH server made through Tor between October 1 and 5, after accepting the interception
Source: The Hacker News