Feds are Suspects in New Malware That Attacks Tor Anonymity

Feds are Suspects in New Malware That Attacks Tor Anonymity

Photo: Andrewfhart / Flickr

Security researchers tonight are poring over a piece of malicious software that takes advantage of a Firefox security vulnerability to identify some users of the privacy-protecting Tor anonymity network.

The malware showed up Sunday morning on multiple websites hosted by the anonymous hosting company Freedom Hosting. That would normally be considered a blatantly criminal “drive-by” hack attack, but nobody’s calling in the FBI this time. The FBI is the prime suspect.

“It just sends identifying information to some IP in Reston, Virginia,” says reverse-engineer Vlad Tsrklevich. “It’s pretty clear that it’s FBI or it’s some other law enforcement agency that’s U.S.-based.”

If Tsrklevich and other researchers are right, the code is likely the first sample captured in the wild of the FBI’s “computer and internet protocol address verifier,” or CIPAV, the law enforcement spyware first reported by WIRED in 2007.

http://www.wired.com/threatlevel/2013/08/freedom-hosting/

Check out the member blogs, videos, and discussions @ http://12160.info

Comment

You need to be a member of 12160 Social Network to add comments!

Join 12160 Social Network

Comment by scotty michele brown on August 5, 2013 at 12:40pm

I had posted a link about this yesterday. I don't use TOR but I figured others here do.

Comment by truth on August 5, 2013 at 12:30pm

Tor users targeted with spyware following anonymous Web-host shutdown

The news that the alleged owner of Freedom Hosting, the internet host for a great number of Tor hidden services, has been arrested and is accused of distributing and promoting child pornography has resounded across the Internet and has explained why in the last few days there were mass outages of Tor hidden services.

But that was not the end of it, because it has been discovered that the pages hosted by Freedom Hosting have been modified to include a specially crafted malicious JavaScript. It's only purpose is to exploit a flaw in Firefox 17 so that the IP address of the user is revealed and sent to a server in Virginia believed to be operated by the FBI.

The 28-year-old Eric Eoin Marques was arrested in Dublin on Thursday on the basis of an extradition warrant issued by a US court on July 29, and has been denied bail until the Irish High Court has had time to review the case. He is scheduled to appear before the court again later this week.

http://www.net-security.org/secworld.php?id=15355

"Destroying the New World Order"

TOP CONTENT THIS WEEK

THANK YOU FOR SUPPORTING THE SITE!

mobile page

12160.info/m

12160 Administrators

 

Latest Activity

Doc Vega posted blog posts
2 hours ago
tjdavis posted a photo
yesterday
james will posted blog posts
yesterday
Less Prone favorited Sandy's video
yesterday
Doc Vega's 5 blog posts were featured
yesterday
tjdavis's 4 blog posts were featured
yesterday
Doc Vega posted a blog post

What was the Significance of the F-94 C and What role in History?

 It’s July 19, 1952 over White House forbidden airspace and Captain William Patterson observes…See More
Sunday
tjdavis posted a video

FLUORIDEGATE: An American Tragedy. a film by Dr. David Kennedy

FLUORIDEGATE: An American Tragedy, is a feature documentary that reveals the tragedy of how government, industry and trade associations protect and promote a...
Sunday
Doc Vega posted a blog post

Rendezvous With The Unknown

Rendezvous With the Unknown Chapter I It was about 9:00 am when I received a text on my phone from…See More
Saturday
cheeki kea replied to cheeki kea's discussion Tartaria
"ah ha - a Tartarian cuisine component lurks inside good old Tartar Sauce. Who would have thought.…"
Saturday
tjdavis posted a blog post
Saturday
Doc Vega posted a blog post

Shadows in the Wind

If you think that life is but a game you can winYou’re just a shadow in the windConveniently…See More
Friday
Doc Vega posted a blog post
Dec 18
tjdavis posted a photo
Dec 17
james will is now a member of 12160 Social Network
Dec 17
Burbia replied to cheeki kea's discussion Tartaria
Dec 17
Burbia posted a video

Mossad: we create a pretend world, we are a global production company... the world is our stage

60 Minutes interviews alleged Mossad agent"we create a pretend world, we are a global production company......the world is our stage."_______________________...
Dec 17
Doc Vega posted a blog post

The Alvin II Encounter: Was There A Living Dinosaur Involved?

The year is 1965 in the Caribbean islands at a 5-thousand-foot depth in the dark Atlantic waters.…See More
Dec 16
Doc Vega posted blog posts
Dec 15
rlionhearted_3 posted photos
Dec 15

© 2025   Created by truth.   Powered by

Badges  |  Report an Issue  |  Terms of Service

content and site copyright 12160.info 2007-2019 - all rights reserved. unless otherwise noted