The Tor browser can be used to browse hidden services on the so-called Dark Web, where both the browser and the site are completely anonymous, or the regular World Wide Web, where only the user with a Tor browser is anonymous. This is a completely different attack from the one identified by Nurmi and it occurs on the regular web, not the Dark Web, but it’s aimed at achieving the same thing – getting you to visit a fake Dark Web service instead of a real one. onion addresses being modified by malicious Tor exit nodes. In another sinister twist user ‘garpamp’, who claims that such activity has been “going on for years”, states that he’s seen pages that list. It is possible that the attacker is gathering information, including user names and passwords. However, the attacker works as MITM and rewrites some content.
These sites are actually working as a transparent proxy to real sites. If he’s correct then the proxies would allow the attacker to launch so-called Man-in-the-Middle attacks, stealing or modifying data as it passes through the fake site. Nurmi also claims that the fake sites aren’t just duplicates of the real sites but proxies for them (he could presumably verify this for his own site but he doesn’t state how or if he tested it for the others). Tor sites are often found through directories rather than search engines and they have addresses that are quite difficult to read, which probably makes it easier to plant fakes than on the regular World Wide Web.įor example, the real and fake addresses for DuckDuckGo are the equally immemorable: In his post to the mailing list he claims that there are multiple copies of each target site with similar-looking addresses. Now I realized that someone is actually generated similar onion domains to all popular onion sites and is re-writing some of the content. I noticed a while ago that there is a clone onion site for Ahmia. Nurmi raised his concerns on Monday, on the Tor-Talk mailing list and published a full list of fake or booby trapped sites to Pastebin. onion version of the popular DuckDuckGo search engine. Nurmi first noticed a fake of his own site before discovering that there are multiple clones of hundreds of other Dark Web sites, including a fake of the. The fake sites were discovered by Juha Nurmi, a founding member of the ahmia.fi project, an open source search engine that aims to search, index and catalogue all the content present on the Tor network. onion are anonymous, Dark Web websites (properly called hidden services) that can only be accessed using the Tor browser. The founder of one of the Dark Web’s fledgling search engines is warning Tor users about the presence of hundreds of fake and booby trapped.
0 kommentar(er)
