Malware & Threats CryptoBandits Malware Doubles as a Backdoor, Abuses Tor CryptoBandits uses a local SOCKS5 proxy for traffic routing, blending data theft with remote code execution. Ionut ArghireJune 19, 2026
Privacy Firefox Vulnerability Allows Tor User Fingerprinting The vulnerability is tracked as CVE-2026-6770 and it has been patched with the release of Firefox 150 and Tor 15.0.10. Eduard KovacsApril 27, 2026
Network Security IP Spoofing Attack Tried to Disrupt Tor Network A coordinated IP spoofing attack that involved port scans tried to disrupt the Tor network by getting relays on blocklists. Eduard KovacsNovember 12, 2024
Vulnerabilities Tor Browser Update Patches Exploited Firefox Zero-Day Tor browser version 13.5.7 is rolling out with patches for an exploited zero-day vulnerability recently addressed in Firefox. Ionut ArghireOctober 14, 2024
Privacy Tor Merges With Security-Focused OS Tails The Tor Project announced that it has merged operations with the security-focused operating system Tails. Eduard KovacsSeptember 27, 2024
Tracking & Law Enforcement Tor Responds to Reports of German Police Deanonymizing Users The Tor Project has responded to claims that German law enforcement has found a way to deanonymize users. Eduard KovacsSeptember 20, 2024
Identity & Access Okta Warns of Credential Stuffing Attacks Using Tor, Residential Proxies Okta warned of a spike in credential stuffing attacks using anonymizing services. Ionut ArghireApril 29, 2024
Application Security Tor Code Audit Finds 17 Vulnerabilities Over a dozen vulnerabilities discovered in Tor audit, including a high-risk flaw that can be exploited to inject arbitrary bridges. Eduard KovacsJanuary 31, 2024
Privacy Tor Network Removes Risky Relays Associated With Cryptocurrency Scheme The Tor network has removed many relays associated with a cryptocurrency scheme, citing risk to integrity and users. Eduard KovacsNovember 21, 2023
Privacy Tor Network Under DDoS Pressure for 7 Months For the past seven months, the Tor network has been hit with numerous DDoS attacks, some impacting availability. Ionut ArghireFebruary 8, 2023