suspectedlowIncidentFirst reported Oct 21, 2026
Tor: over 300 exit relays hijacked to intercept SSH connections
A researcher found that attackers controlled more than 300 Tor exit relays in early October and used them to redirect SSH connections to servers that captured login passwords. Password-based SSH logins made over Tor between October 1 and 5, where the interception was accepted, were affected.
Members only
The full record: the timeline and 2 linked reports
- Every update as it happened, with the status at each step
- Every report behind the record, newest first
- Alerts the moment Tor Project — or anything else you track — is hit again
A free account is all it takes — no card, one minute.