KABA.CX
- How I got over 300 Tor exit nodes removed October 20, 2026 On Friday Oct 2, 09:35am, 333 infected exit nodes started a coordinated campaign to intercept SSH connections and gather as much unencrypted data as possible.
- To give you a sense of scale, all of Tor has around 3000 exit relays, so roughly 10% were under their control.
- The attackers had gained access to the servers two months earlier, in August, and quietly deployed their Ebury 1.8.3 payload (an OpenSSH backdoor and credential stealer for Linux).
Unverified
- How I got over 300 Tor exit nodes removed October 20, 2026 On Friday Oct 2, 09:35am, 333 infected exit nodes started a coordinated campaign to intercept SSH connections and gather as much unencrypted data as possible.
- To give you a sense of scale, all of Tor has around 3000 exit relays, so roughly 10% were under their control.
- The attackers had gained access to the servers two months earlier, in August, and quietly deployed their Ebury 1.8.3 payload (an OpenSSH backdoor and credential stealer for Linux).
Sources: Kaba