
How I got over 300 Tor exit nodes removed
Torsecuritymalwareman-in-the-middleexit nodesEburycybersecuritynetwork security
On October 2, 333 Tor exit nodes (approximately 10% of all Tor exits) began redirecting port 22 traffic to 12 interception servers. These servers were running a paramiko-based man-in-the-middle attack that stole passwords and attempted to deploy Ebury malware on target systems. The malicious exit nodes were subsequently removed.