mediumNetworkcontained21 Oct 2026
Tor exit relays
333 relays hijacked to steal logins
What happened
A coordinated set of malicious Tor exit relays performed TLS stripping and credential capture against users who treated the network as anonymity without integrity.
Timeline
21 Oct 2026 · 13:00 UTC
Detection
Researchers flag 333 relays sharing infrastructure.21 Oct 2026 · 23:00 UTC
Removal
The relays are dropped from the consensus.22 Oct 2026 · 15:00 UTC
Advice
Users are told to rotate credentials used over Tor.
Sources