Russia Attempted to De-Anonymize Tor Browser: Report
An attempt to crack Tor was one of many projects hackers discovered when they broke into Russian intelligence contractor SyTech.
![](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/bltc94608acf452fd67/655cf371ab171e040a838b2a/329050_DR23_Graphics_Website_V5_Default_Image_v1.png?width=1280&auto=webp&quality=95&format=jpg&disable=upscale)
When hackers from the 0v1ru$ group breached the server of SyTech, a contractor for Russian Federal Security Service FSB, they stole approximately 7.5 terabytes of data that included descriptions of internal projects. One of these was an attempt to crack the Tor browser.
BBC Russia first reported on the breach, which occurred on July 13. The intruders replaced SyTech's homepage with a "yoba face," or a smiley common among Internet trolls, and they shared the wealth of information they discovered with other attack groups and journalists.
It's unclear whether attempts to de-anonymize Tor were successful, the report states. It seems the experimental tactics mostly relied on luck. Tor lets people conceal location and Internet use; when people connect, Internet service providers know they're using it but not which sites are visited. The FSB can demand to know whether Tor is being used but wanted to learn more, so it attempted to detect which websites were being visited through the Tor browser.
The attempt to de-anonymize Tor was one of many projects discovered in the SyTech breach. Others included efforts to search email servers of major companies, collect data on social media users, and learn how Russia's Internet interacts with external networks.
Read more details here.
Black Hat USA returns to Las Vegas with hands-on technical Trainings, cutting-edge Briefings, Arsenal open-source tool demonstrations, top-tier security solutions, and service providers in the Business Hall. Click for information on the conference and to register.
About the Author
You May Also Like
Catch the Threat Before it Catches you: Proactive Ransomware Defense
September 5, 2024How to Evaluate Hybrid-Cloud Network Policies and Enhance Security
September 18, 2024DORA and PCI DSS 4.0: Scale Your Mainframe Security Strategy Among Evolving Regulations
September 26, 2024Harnessing the Power of Automation to Boost Enterprise Cybersecurity
October 3, 2024
[Virtual Event] The Essential Guide to Cloud Management
October 17, 2024Black Hat Europe - December 9-12 - Learn More
December 10, 2024SecTor - Canada's IT Security Conference Oct 22-24 - Learn More
October 22, 2024