Attackers Hijack Over 300 Tor Exit Relays to Intercept SSH Connections

In early October, threat actors compromised over 300 Tor exit relays to redirect SSH traffic to malicious servers designed to harvest login credentials. Systems administrators utilizing SSH over Tor during this timeframe are advised to rotate passwords due to potential interception.