333 Tor exit nodes hijacked to intercept SSH traffic and plaintext email
Researchers reported that more than 300 Tor exit nodes were hijacked and reconfigured to favor unencrypted email traffic and redirect SSH connections through attacker-controlled servers. The hijacking began in late August after an attacker used a reused valid password to access a Tor management server.