Attempted MITM on BitPay over Tor

[keystroke]

Some links to BitPay are hijacked by evil exit nodes. Their SSL certificate isn't for BitPay but seems generated on the fly. The new page then tries to get you to pay to one of their BTC addresses. Anyone else see this? Nice attack vector.

[1715248460]

1715248460

[1715248460]

1715248460

[QuantumQrack]

Sounds to me like Tor is fucking useless.

[lyth0s]

Hmm. Can you confirm that this is only for bitpay? Or do they replace all bitcoin addresses?

[Divinespark]

Tor is a complete waste of time. trading in suboptimal anonymity for guaranteed insecurity.

[deluxeCITY]

Sounds to me like Tor is fucking useless.

As of recently tor has become much less secure when connecting to non-tor sites via tor.

The TOR project has not been able to determine exactly how law enforcement was able to find the identities/locations of the onion sites, however it is most likely (IMO) that they used some kind of timing attack

[keystroke]

The page was designed as a BitPay page. So at least in this case they didn't replace random bitcoin addresses.

[buybtc]

Report the bad exit nodes to the tor project, they will blacklist their IPs

[hilariousandco]

Hmm. Can you confirm that this is only for bitpay? Or do they replace all bitcoin addresses?

Users have reported thefts from their blockchain.info accounts as well.