[ANN] [PSA] 333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email
The lesson is the same as always: extra security is a worthwhile investment. Disable password authentication in favor of ssh keys.
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the ED25519 key sent by the remote host is
SHA256:6baCZCPsl+AfQuujUS81fMEE/C7UeJ+AwjrImqmDB3E.
Please contact your system administrator.
Link: https://kaba.cx/posts/20261020_Tor/
Author: anon
Contact: n/a
Note:
This is a free community message from anon.
Read the service announcement for more info.
Always DYOR and make use of reputable escrow services. I do not/can not verify anything. Report any suspicious messages.
