333 Tor exit nodes compromised to intercept SSH sessions, steal passwords and deploy Ebury 1.8.3 backdoor
Attackers compromised 333 Tor exit nodes, roughly 10% of the network's ~3,000 exit relays, to intercept SSH connections, harvest passwords and attempt to install the Ebury Linux backdoor. A researcher's account published on October 20, 2026 says the attackers accessed the underlying servers in August and began coordinated interception on …