WORLDTECH NEWS Global technology intelligence.Contact
← Back to WORLDTECH
Cybersecurity SINGLE SOURCE

GoBalance Flaw Lets Attackers Hijack.onion Addresses by Recovering Tor-Format Keys

A robotic hand grasping black keyboard keys in a minimalist setting.
Illustrative photo.Photo by Tara Winstead on Pexels

What happened

Searchlight Cyber, which disclosed the flaw on October 8, says an attacker who recovers the key can redirect the site's visitors to a copy of the site they control. A bug in GoBalance, a tool many dark-web sites use to stay reachable during attacks, lets anyone work out the secret key that controls a site's .onion address using only public information, and then take that address over.

Sources & evidence