Mitm Attack - GoKawiil

Chainalysis confirms breach exposed credentials and tokens for all customers

Chainalysis has disclosed that a cyberattack on its systems compromised usernames, password hashes and live authentication tokens belonging to every customer, expanding earlier reports that only limited identity metadata was affected. The blockchain analytics firm, whose clients include law enforcement and financial institutions, said attackers used 'offensive agentic' AI techniques and an on-path (man-in-the-middle) attack to intercept the data. In response, Chainalysis took its login portal, Reactor, Data Solutions, KYT tools and address screening products offline and asked customers to supply trusted IP addresses.

bleepingcomputer.com · 2026-11-06

Researcher helps Tor Project remove over 300 compromised exit nodes tied to Ebury malware

A security researcher discovered that 333 Tor exit relays—about 10% of the network—had been infected since August with the Ebury SSH backdoor and were coordinating a man-in-the-middle attack on SSH connections starting October 2. The compromised nodes redirected SSH traffic to 12 interception servers that stole passwords and harvested unencrypted mail traffic, prompting the researcher's report that led to the removal of the infected exit nodes from the Tor network.

kaba.cx · 2026-10-20