{"id":49774,"date":"2020-08-13T09:01:12","date_gmt":"2020-08-13T09:01:12","guid":{"rendered":"https:\/\/www.cryptocabaret.com\/?p=49774"},"modified":"2020-08-13T09:01:12","modified_gmt":"2020-08-13T09:01:12","slug":"bitcoin-users-leery-of-tor-23-of-the-networks-exit-capacity-compromised","status":"publish","type":"post","link":"https:\/\/www.cryptocabaret.com\/?p=49774","title":{"rendered":"Bitcoin Users Leery of Tor: 23% of the Network\u2019s Exit Capacity Compromised"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" width=\"696\" height=\"392\" src=\"https:\/\/www.cryptocabaret.com\/wp-content\/uploads\/2020\/08\/bitcoin-users-leery-of-tor-23-of-the-networks-exit-capacity-compromised-768x432.jpg\" alt=\"Bitcoin Users Leery of Tor: 23% of the Network&rsquo;s Exit Capacity Compromised\" srcset=\"https:\/\/www.cryptocabaret.com\/wp-content\/uploads\/2020\/08\/bitcoin-users-leery-of-tor-23-of-the-networks-exit-capacity-compromised-768x432.jpg 768w, https:\/\/news.bitcoin.com\/wp-content\/uploads\/2020\/08\/bitcoin-users-leery-of-tor-23-of-the-networks-exit-capacity-compromised-300x169.jpg 300w, https:\/\/news.bitcoin.com\/wp-content\/uploads\/2020\/08\/bitcoin-users-leery-of-tor-23-of-the-networks-exit-capacity-compromised-1024x576.jpg 1024w, https:\/\/news.bitcoin.com\/wp-content\/uploads\/2020\/08\/bitcoin-users-leery-of-tor-23-of-the-networks-exit-capacity-compromised-696x392.jpg 696w, https:\/\/news.bitcoin.com\/wp-content\/uploads\/2020\/08\/bitcoin-users-leery-of-tor-23-of-the-networks-exit-capacity-compromised-1068x601.jpg 1068w, https:\/\/news.bitcoin.com\/wp-content\/uploads\/2020\/08\/bitcoin-users-leery-of-tor-23-of-the-networks-exit-capacity-compromised-747x420.jpg 747w, https:\/\/news.bitcoin.com\/wp-content\/uploads\/2020\/08\/bitcoin-users-leery-of-tor-23-of-the-networks-exit-capacity-compromised-190x107.jpg 190w, https:\/\/news.bitcoin.com\/wp-content\/uploads\/2020\/08\/bitcoin-users-leery-of-tor-23-of-the-networks-exit-capacity-compromised-380x214.jpg 380w, https:\/\/news.bitcoin.com\/wp-content\/uploads\/2020\/08\/bitcoin-users-leery-of-tor-23-of-the-networks-exit-capacity-compromised-760x428.jpg 760w, https:\/\/news.bitcoin.com\/wp-content\/uploads\/2020\/08\/bitcoin-users-leery-of-tor-23-of-the-networks-exit-capacity-compromised.jpg 1280w\" sizes=\"auto, (max-width: 696px) 100vw, 696px\"><\/p>\n<p><strong>Hackers are stealing bitcoin through the large-scale use of malicious relays on the Tor network according to a newly published research report on the subject. The researcher dubbed &ldquo;nusenu&rdquo; said he warned people about the growing problem in December 2019 but instead of improving Tor exit relay activity &ldquo;things have become even worse,&rdquo; he stressed.<\/strong><\/p>\n<p>Malicious entities have made visitors of the anonymous communications protocol the Tor network vulnerable to attacks. Tor is a browser and open-source software that directs a person&rsquo;s web traffic in an obfuscated fashion in order to circumvent traffic analysis and network surveillance.<\/p>\n<p>A great number of bitcoiners and cryptocurrency advocates leverage the Tor network to surf the web with anonymity but also to leverage darknet markets and coin mixers. Even Satoshi Nakamoto recommended the use of Tor while sending transactions for added privacy.<\/p>\n<p>On February 2, 2010, Satoshi Nakamoto <a href=\"https:\/\/bitcointalk.org\/index.php?topic=7.msg264#msg264\">said<\/a>:<\/p>\n<blockquote>\n<p>You could use Tor if you don&rsquo;t want anyone to know you&rsquo;re even using Bitcoin.<\/p>\n<\/blockquote>\n<p>The <a href=\"https:\/\/medium.com\/@nusenu\/how-malicious-tor-relays-are-exploiting-users-in-2020-part-i-1097575c0cac\">research analysis<\/a> from the investigator &ldquo;nusenu&rdquo; says &ldquo;23% of the Tor network&rsquo;s exit capacity has been attacking Tor users.&rdquo; Of course, the hackers are focused on making money and they have utilized bitcoin address rewriting attacks.<\/p>\n<figure aria-describedby=\"caption-attachment-405511\"><img loading=\"lazy\" decoding=\"async\" title=\"Bitcoin Users Leery of Tor: 23% of the Network&rsquo;s Exit Capacity Compromised\" src=\"https:\/\/www.cryptocabaret.com\/wp-content\/uploads\/2020\/08\/effqd5yxkagxklp.png\" alt=\"Bitcoin Users Leery of Tor: 23% of the Network&rsquo;s Exit Capacity Compromised\" width=\"810\" height=\"363\" srcset=\"https:\/\/www.cryptocabaret.com\/wp-content\/uploads\/2020\/08\/effqd5yxkagxklp.png 810w, https:\/\/news.bitcoin.com\/wp-content\/uploads\/2020\/08\/effqd5yxkagxklp-300x134.png 300w, https:\/\/news.bitcoin.com\/wp-content\/uploads\/2020\/08\/effqd5yxkagxklp-768x344.png 768w, https:\/\/news.bitcoin.com\/wp-content\/uploads\/2020\/08\/effqd5yxkagxklp-696x312.png 696w\" sizes=\"auto, (max-width: 810px) 100vw, 810px\"><figcaption>&ldquo;What ISPs did the attacker use? Mostly OVH and FranTech Solutions. Graph by <a href=\"https:\/\/nusenu.github.io\/\" target=\"_blank\" rel=\"noopener nofollow noreferrer\">nusenu<\/a> (raw data source: <a href=\"https:\/\/metrics.torproject.org\/onionoo.html\" target=\"_blank\" rel=\"noopener nofollow noreferrer\">https:\/\/metrics.torproject.org\/onionoo.html<\/a>)&rdquo;<\/figcaption><\/figure>\n<p>Essentially, the person sending the coin will unknowingly send the crypto asset to a different address controlled by the hackers rather than sending it to the intended destination. Nusenu detailed that bitcoin address rewriting attacks have been happening for a long time now but the scale of the operation has swelled.<\/p>\n<p>&ldquo;It appears that they are primarily after cryptocurrency-related websites&mdash;namely multiple bitcoin mixer services. They replaced bitcoin addresses in HTTP traffic to redirect transactions to their wallets instead of the user-provided bitcoin address,&rdquo; the researcher said in the blog post published on August 9.<\/p>\n<p>The news has shaken the crypto community, as <a href=\"https:\/\/twitter.com\/search?q=bitcoin%20tor&amp;src=typed_query\">discussions concerning the subject<\/a> are littered all over social media and forums. One Redditor <a href=\"https:\/\/old.reddit.com\/r\/btc\/comments\/i87yie\/hackers_steal_bitcoin_through_largescale_exploit\/g17182j\/\">attributed<\/a> the problems to the recent Mozilla layoff as the company let go 250 people. &ldquo;And Mozilla just laid off their security vulnerability staff. Speculated to impact Tor Browser security into the future,&rdquo; the Redditor said. Nusenu did discuss the certain layoffs in his blog post that were attributed to the recent Covid-19 outbreak.<\/p>\n<p>&ldquo;After the blog post from December 2019 the Tor Project had some promising <a href=\"https:\/\/lists.torproject.org\/pipermail\/tor-relays\/2019-December\/017961.html\">plans for 2020<\/a> with a dedicated person to drive improvements in this area, but due to the recent COVID19 related <a href=\"https:\/\/blog.torproject.org\/covid19-impact-tor\">layoffs<\/a> that person got <a href=\"http:\/\/meetbot.debian.net\/tor-meeting\/2020\/tor-meeting.2020-05-04-17.59.log.txt\">assigned to another area<\/a>,&rdquo; nusenu said. &ldquo;In addition to that, Tor directory authorities apparently are no longer removing relays <a href=\"https:\/\/lists.torproject.org\/pipermail\/tor-talk\/2019-October\/045323.html\">they used to remove<\/a> since 2020&ndash;06&ndash;26.&rdquo;<\/p>\n<p>It&rsquo;s safe to say that most crypto advocates and bitcoiners understand the risks associated with Tor, as many believe while the network provides privacy it is also a honeypot filled with malicious behavior and law enforcement. It&rsquo;s also fair to say that bitcoiners will likely play it safer after hearing that close to a quarter of the Tor exit relays may be compromised.<\/p>\n<p><em><strong>What do you think about the recent Tor exit relay revelations and the bitcoin address rewriting attacks? Let us know what you think about this subject in the comments section below.<\/strong><\/em><\/p>\n<p>The post <a rel=\"nofollow\" href=\"https:\/\/news.bitcoin.com\/bitcoin-users-leery-of-tor-23-of-the-networks-exit-capacity-compromised\/\">Bitcoin Users Leery of Tor: 23% of the Network&rsquo;s Exit Capacity Compromised<\/a> appeared first on <a rel=\"nofollow\" href=\"https:\/\/news.bitcoin.com\/\">Bitcoin News<\/a>.<\/p>\n<p class=\"wpematico_credit\"><small>Powered by <a href=\"http:\/\/www.wpematico.com\" target=\"_blank\" rel=\"noopener noreferrer\">WPeMatico<\/a><\/small><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hackers are stealing bitcoin through the large-scale use of malicious relays on the Tor network according to a newly published research report on the subject. The researcher dubbed &ldquo;nusenu&rdquo; said he warned people about the growing problem in December 2019 but instead of improving Tor exit relay activity &ldquo;things have become even worse,&rdquo; he stressed. [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":49775,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[309],"tags":[],"class_list":["post-49774","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cryptocurrency"],"_links":{"self":[{"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=\/wp\/v2\/posts\/49774","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=49774"}],"version-history":[{"count":0,"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=\/wp\/v2\/posts\/49774\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=\/wp\/v2\/media\/49775"}],"wp:attachment":[{"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=49774"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=49774"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=49774"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}