Attackers Hijacked Over 300 Tor Exit Relays to Intercept SSH Connections
It's scary month
https://thehackernews.com/2026/10/attackers-hijacked-over-300-tor-exit.htmlOpen linkView original on lemmy.blahaj.zoneSyndicated from the fediverse. Read and engage on the original instance.
View original on lemmy.blahaj.zonehttps://thehackernews.com/2026/10/attackers-hijacked-over-300-tor-exit.htmlOpen linkView original on lemmy.blahaj.zone
5 replies
There is no good reason to use ssh with a password. Always use key based authentication.
Here is a tutorial for anyone who may need it. https://www.digitalocean.com/community/tutorials/how-to-create-ssh-keys-with-openssh-on-macos-or-linux
Totally agree. Better still, don't expose OpenSSH directly to the internet. It's just too popular at this point and boasts way too many features. The pressure to break it is overwhelming. Layer your defences. You can use a VPN like IPSec, Wireguard, or Tailscale or even something as simple as spiped and you can configure OpenSSH's client with ProxyCommand to make it completely transparent. It's not that these won't have holes also, but hopefully not at the same moment OpenSSH has something.
Agreed. Great additional and needed information that I neglected to mention.
Is it only standard port though?
Yeah port 22 only.