Attackers hijacked over 300 Tor exit relays to intercept SSH logins
Compromised Tor relays were reconfigured to route SSH traffic to interception servers between October 1 and 5, stealing passwords and installing the Ebury backdoor, The Hacker News reports.