{"id":41394,"date":"2020-08-09T17:30:24","date_gmt":"2020-08-09T15:30:24","guid":{"rendered":"https:\/\/www.burks.de\/burksblog\/?p=41394"},"modified":"2020-08-09T17:30:25","modified_gmt":"2020-08-09T15:30:25","slug":"malicious-tor-relays","status":"publish","type":"post","link":"https:\/\/www.burks.de\/burksblog\/2020\/08\/09\/malicious-tor-relays","title":{"rendered":"Malicious Tor Relays"},"content":{"rendered":"<p><a href=\"https:\/\/medium.com\/@nusenu\/how-malicious-tor-relays-are-exploiting-users-in-2020-part-i-1097575c0cac\"><img decoding=\"async\" src=\"https:\/\/www.burks.de\/burksblog\/pix\/2020\/08\/090820_5.jpg\" alt=\"tor servers\" border=\"0\" hspace=\"0\" vspace=\"0\" width=\"480\"\/><\/a><\/p>\n<p><a href=\"https:\/\/medium.com\/@nusenu\/how-malicious-tor-relays-are-exploiting-users-in-2020-part-i-1097575c0cac\">Medium.com<\/a>: &#8222;How Malicious Tor Relays are Exploiting Users in 2020 (Part I)<br \/>\n&#8211; 23% of the Tor network\u2019s exit capacity has been attacking Tor users&#8220;.<\/p>\n<p>&#8222;So far 2020 is probably the worst year in terms of malicious Tor exit relay activity since I started monitoring it about 5 years ago. As far as I know this is the first time we uncovered a malicious actor running more than 23% of the entire Tor network\u2019s exit capacity. That means roughly about one out of 4 connections leaving the Tor network were going through exit relays controlled by a single attacker.&#8220;<\/p>\n<p>Conclusio: <b>The full extend of their operations is unknown, but one motivation appears to be plain and simple: profit. (&#8230;) Malicious relays are just used to gain access to user traffic. To make detection harder, the malicious entity did not attack all websites equally. It appears that they are primarily after cryptocurrency related websites \u2014 namely multiple bitcoin mixer services.<\/b><\/p>\n<p>Hintergrundartikel desselben Autors (08.12.2019): <a href=\"https:\/\/medium.com\/@nusenu\/the-growing-problem-of-malicious-relays-on-the-tor-network-2f14198af548\">The Growing Problem of Malicious Relays on the Tor Network<\/a>.<\/p>\n<div class=\"pdfprnt-buttons pdfprnt-buttons-post pdfprnt-bottom-right\"><a href=\"https:\/\/www.burks.de\/burksblog\/wp-json\/wp\/v2\/posts\/41394?print=pdf\" class=\"pdfprnt-button pdfprnt-button-pdf\" target=\"_blank\" ><img decoding=\"async\" src=\"https:\/\/www.burks.de\/burksblog\/wp-content\/plugins\/pdf-print\/images\/pdf.png\" alt=\"image_pdf\" title=\"PDF anzeigen\" \/><\/a><a href=\"https:\/\/www.burks.de\/burksblog\/wp-json\/wp\/v2\/posts\/41394?print=print\" class=\"pdfprnt-button pdfprnt-button-print\" target=\"_blank\" ><img decoding=\"async\" src=\"https:\/\/www.burks.de\/burksblog\/wp-content\/plugins\/pdf-print\/images\/print.png\" alt=\"image_print\" title=\"Inhalt drucken\" \/><\/a><\/div><div class=\"twoclick_social_bookmarks_post_41394 social_share_privacy clearfix 1.6.4 locale-de_DE sprite-de_DE\"><\/div><div class=\"twoclick-js\"><script type=\"text\/javascript\">\/* <![CDATA[ *\/\njQuery(document).ready(function($){if($('.twoclick_social_bookmarks_post_41394')){$('.twoclick_social_bookmarks_post_41394').socialSharePrivacy({\"services\":{\"facebook\":{\"status\":\"on\",\"txt_info\":\"2 Klicks f\\u00fcr mehr Datenschutz: Erst wenn Sie hier klicken, wird der Button aktiv und Sie k\\u00f6nnen Ihre Empfehlung an Facebook senden. Schon beim Aktivieren werden Daten an Dritte \\u00fcbertragen - siehe <em>i<\\\/em>.\",\"perma_option\":\"off\",\"action\":\"recommend\",\"language\":\"de_DE\"},\"twitter\":{\"reply_to\":\"\",\"tweet_text\":\"%20Malicious%20Tor%20Relays%20%C2%BB%20Burks%27%20Blog%20-%20in%20dubio%20pro%20contra.%20De%20omnibus%20...\",\"status\":\"on\",\"txt_info\":\"2 Klicks f\\u00fcr mehr Datenschutz: Erst wenn Sie hier klicken, wird der Button aktiv und Sie k\\u00f6nnen Ihre Empfehlung an Twitter senden. Schon beim Aktivieren werden Daten an Dritte \\u00fcbertragen - siehe <em>i<\\\/em>.\",\"perma_option\":\"off\",\"language\":\"de\",\"referrer_track\":\"\"}},\"txt_help\":\"Wenn Sie diese Felder durch einen Klick aktivieren, werden Informationen an Facebook, Twitter, Flattr, Xing, t3n, LinkedIn, Pinterest oder Google eventuell ins Ausland \\u00fcbertragen und unter Umst\\u00e4nden auch dort gespeichert. N\\u00e4heres erfahren Sie durch einen Klick auf das <em>i<\\\/em>.\",\"settings_perma\":\"Dauerhaft aktivieren und Daten\\u00fcber-tragung zustimmen:\",\"info_link\":\"http:\\\/\\\/www.heise.de\\\/ct\\\/artikel\\\/2-Klicks-fuer-mehr-Datenschutz-1333879.html\",\"uri\":\"https:\\\/\\\/www.burks.de\\\/burksblog\\\/2020\\\/08\\\/09\\\/malicious-tor-relays\",\"post_id\":41394,\"post_title_referrer_track\":\"Malicious+Tor+Relays\",\"display_infobox\":\"on\"});}});\n\/* ]]> *\/<\/script><\/div>","protected":false},"excerpt":{"rendered":"<p>Medium.com: &#8222;How Malicious Tor Relays are Exploiting Users in 2020 (Part I) &#8211; 23% of the Tor network\u2019s exit capacity has been attacking Tor users&#8220;. &#8222;So far 2020 is probably the worst year in terms of malicious Tor exit relay activity since I started monitoring it about 5 years ago. As far as I know [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[21],"tags":[],"class_list":["post-41394","post","type-post","status-publish","format-standard","hentry","category-internet-and-computer"],"_links":{"self":[{"href":"https:\/\/www.burks.de\/burksblog\/wp-json\/wp\/v2\/posts\/41394","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.burks.de\/burksblog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.burks.de\/burksblog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.burks.de\/burksblog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.burks.de\/burksblog\/wp-json\/wp\/v2\/comments?post=41394"}],"version-history":[{"count":1,"href":"https:\/\/www.burks.de\/burksblog\/wp-json\/wp\/v2\/posts\/41394\/revisions"}],"predecessor-version":[{"id":41395,"href":"https:\/\/www.burks.de\/burksblog\/wp-json\/wp\/v2\/posts\/41394\/revisions\/41395"}],"wp:attachment":[{"href":"https:\/\/www.burks.de\/burksblog\/wp-json\/wp\/v2\/media?parent=41394"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.burks.de\/burksblog\/wp-json\/wp\/v2\/categories?post=41394"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.burks.de\/burksblog\/wp-json\/wp\/v2\/tags?post=41394"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}