GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys

Summary

A bug in GoBalance, a tool many dark-web sites use to stay reachable during attacks, lets anyone work out the secret key that controls a site's .onion address using only public information, and then take that address over. Searchlight Cyber, which disclosed the flaw on October 8, says an attacker who recovers the key can redirect the site's visitors to a copy of the site they control.

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.