For 3 days this month, 333 exit nodes were hacked in hopes of stealing sensitive data.

For 3 days this month, 333 exit nodes were hacked in hopes of stealing sensitive data.

  • Kazumara@discuss.tchncs.deEnglish
    13·
    4 days ago

    And also:

    But if you ignore the warning and go ahead with the login, the attacker does three things:

    • Steals your password
    • Opens a connection to your server and observes each command you type (MITM)
    • Opens a second connection to your server and infects it with Ebury

    Don’t use passwords for your SSH. With key based auth your session would still have been intercepted and relayed, but the attacker can’t make arbitrary new sessions, because they don’t get your private key.

    • WhyJiffie@sh.itjust.worksEnglish
      4·
      4 days ago

      but the attacker can’t make arbitrary new sessions, because they don’t get your private key.

      unless the attacker takes over the session to allow its own public key, or just password auth.