As cited
Copy frozen at (site build).
vulnerabilities
GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys
GoBalance, a tool used to maintain .onion address availability during attacks, contains a vulnerability that allows attackers to recover the secret key controlling a site's .onion address using only public information. An attacker with the recovered key can redirect the site's visitors to an attacker-controlled copy.
Why it matters: Dark web site operators and security teams monitoring Tor infrastructure are at risk of domain hijacking and visitor redirection attacks; practitioners should assess whether their monitored or defended assets rely on GoBalance.
- Source published
- First seen by Cybersecurity Tracker