CERT24GoBalance Flaw Lets Attackers Hijack .onion AddressesLoading data…

GoBalance Flaw Lets Attackers Hijack .onion Addresses

A flaw in GoBalance allows attackers to recover the secret key controlling a .onion address from public information and take over the address. The source reports takeovers involving multiple dark-web services and says an attacker can redirect visitors to a copy of the site they control, but cannot thereby access the original site's servers, database, or stored user data.

← Back to intelligence

GoBalance Flaw Lets Attackers Hijack .onion Addresses

A flaw in GoBalance allows attackers to recover the secret key controlling a .onion address from public information and take over the address. The source reports takeovers involving multiple dark-web services and says an attacker can redirect visitors to a copy of the site they control, but cannot thereby access the original site's servers, database, or stored user data.