Hijacked Tor Exits
Attackers took control of more than 300 Tor exit relays in early October and sent SSH logins to interception servers that could read passwords.
Key terms
AP Cybersecurity alignment
- 3.1.C.1Vulnerabilities on a network can lead to adversaries being able to intercept and alter data in transit, launch DoS attacks, or move laterally on a network to gain access to more sensitive or critical systems. Network…Learning objective: Assess and document risks from network vulnerabilities.
- 4.1.B.1Malware is malicious software that can damage or destroy a device or network, or allow an adversary access to a device and the data on the device.Learning objective: Identify the type of malware used in a cyberattack.
- 4.2.B.3Many users reuse the same passwords (or variations of the same password) for all the services and accounts they have, despite warnings not to. When an organization’s user database is stolen, the usernames, emails, and…Learning objective: Explain how password attacks exploit vulnerabilities.
AP Networking alignment
- 1.4.B.4To prevent unauthorized account access through credential reuse or guessing, users should use strong, unique passwords for each account to prevent access if any single set of credentials is compromised.Learning objective: Implement device- and account-level security practices to prevent phishing, credential compromise, and data loss.
- 4.1.A.3When confidentiality is compromised, systems are vulnerable to having sensitive data exposed or stolen. A breach of confidentiality can be identified by: • unauthorized access • network traffic showing exfiltration of…Learning objective: Identify evidence of compromised confidentiality, integrity, or availability.
- 4.3.B.1The CLI allows users to perform tasks efficiently, including system management and file transfers. Secure Shell (SSH) is a protocol used in CLI environments to securely connect to remote systems. It encrypts all data exchanged…Learning objective: Apply CLI commands to securely transfer files.