ebury

The host key warning on 333 hijacked Tor relays

How 333 infected Tor exit relays ran an Ebury-based SSH interception and unencrypted-mail collection campaign, and how a researcher found and helped take them down.