3 hours ago · Global
333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email
What's happening
SignalsMonitor is following this as a technology story. Ars Technica is the outlet attached so far. The reports are tied to Global. The first report grouped here was at 22 Oct 2026, 11:30 UTC. The headline in use is “333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email”. This note is SignalsMonitor's own briefing, not the publisher's article.
What we know
Unknown hackers hijacked more than 300 Tor exit nodes and reconfigured them to favor unencrypted email traffic and redirect SSH connections through servers they controlled, a researcher reported Tuesday. The hijacking began in late August, when, according to Tor volunteers, the attacker used a valid password that had been reused…
Story timeline
Reports grouped into this story, earliest first. Exact repeats from the same outlet are collapsed.
- First reported by Ars Technica
333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email
Reported by 1 outlet
- Ars Technica