333 Tor exit nodes hijacked to intercept SSH traffic and steal plaintext email

For three days this month, 333 Tor exit nodes were compromised by attackers seeking to capture sensitive information. The hijacked nodes were reportedly used to intercept SSH traffic and retrieve email sent in plaintext. Tor exit nodes are the final relays that send user traffic onto the open internet, which makes them a point where unencrypted data can be exposed. The incident highlights the risks of transmitting data without end-to-end encryption, even when routed through anonymity networks.