203
333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email (arstechnica.com)
submitted 2 weeks ago by to c/technology@lemmy.world
11 comments fedilink hide all child comments
 

For 3 days this month, 333 exit nodes were hacked in hopes of stealing sensitive data.

you are viewing a single comment's thread
view the rest of the comments
[–] 13 points 2 weeks ago (1 child)

And also:

But if you ignore the warning and go ahead with the login, the attacker does three things:

  • Steals your password
  • Opens a connection to your server and observes each command you type (MITM)
  • Opens a second connection to your server and infects it with Ebury

Don't use passwords for your SSH. With key based auth your session would still have been intercepted and relayed, but the attacker can't make arbitrary new sessions, because they don't get your private key.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •