OP 03 May, 2021 - 05:12 PM
IMPORTANT NOTICES
Dark.Fail Restored to Owner
As of approximately 1 hour ago it has been announced that the domain "Dark.Fail" is now back under the control of the original owner(s).
Continue to take precautions and manually verifying mirrors.txt documents through GnuPG verification of signatures. They as of now are working on carefully rebuilding.
Tweet from Dark.Fail: See Tweet
Njal.la Releases Articles Addressing Hijacking Attacks
Njalla has also come forward and provided a clarification article in regards to the phishing attacks of the past few days.
You can read this article on their blog provided on their website. The clear net domain's link to their blog
post is provided below for any who wishes to review it.
Read the article here: Njalla's Response Article
Multiple.Onion Directory Services BreachedDark.Fail Restored to Owner
As of approximately 1 hour ago it has been announced that the domain "Dark.Fail" is now back under the control of the original owner(s).
Continue to take precautions and manually verifying mirrors.txt documents through GnuPG verification of signatures. They as of now are working on carefully rebuilding.
Tweet from Dark.Fail: See Tweet
Njal.la Releases Articles Addressing Hijacking Attacks
Njalla has also come forward and provided a clarification article in regards to the phishing attacks of the past few days.
You can read this article on their blog provided on their website. The clear net domain's link to their blog
post is provided below for any who wishes to review it.
Read the article here: Njalla's Response Article
Several Directory Archiving Services For The Tor Onion Network Succumb to MiTM Phishing Attack
In the last week there have been multiple cases of .onion directory services website's having their domain(s) stolen,
Links provided on these websites are set to route the victim first through the attacker's malicious web proxy.
This intercepts the victim's private credentials, and/or manipulate the content which they are presented with upon
rendering the web document in order to potentially deceive the victim and compromise their information.
According to tweets posted by Dark.Fail the .onion mirror's of Dark.Fail have not been compromised,
although take all precautionary measures when using any directory service. Ensure that you take
the time to review the mirrors.txt of all .onion services and their third party correspondents.
Manually verify all GPG/PGP signatures of every .onion service.
BREACHED SITES LIST
Links provided on these websites are set to route the victim first through the attacker's malicious web proxy.
This intercepts the victim's private credentials, and/or manipulate the content which they are presented with upon
rendering the web document in order to potentially deceive the victim and compromise their information.
According to tweets posted by Dark.Fail the .onion mirror's of Dark.Fail have not been compromised,
although take all precautionary measures when using any directory service. Ensure that you take
the time to review the mirrors.txt of all .onion services and their third party correspondents.
Manually verify all GPG/PGP signatures of every .onion service.
BREACHED SITES LIST
- Dark.Fail - [Updated see notice at top of thread]
Dark.Fail has had their security penetrated and their domain stolen.
- DarkNetLive.com
DarkNetLive.com has had their security penetrated and their domain stolen.
RESOURCES REGARDING DARKNETLIVE,COM:
- Onion.live
Onion.live has had their security penetrated and their domain stolen.
RESOURCES REGARDING ONION.LIVE:
This list will be kept updated until further notice, or the attack's of these services ceases.
Additional information derived from trustworthy / verifiable sources will also be appended to their corresponding listings within this archive.
Stay Safe!
This list will be kept updated until further notice, or the attack's of these services ceases.
Additional information derived from trustworthy / verifiable sources will also be appended to their corresponding listings within this archive.
Stay Safe!
[DM to purchase Signature Ad Slots]
[Ping's PGP Key]
I am NOT affiliated with any "Ping" shops, or services being marketed over this forum.
Before conducting any form of business confirm my identity through onsite PM.
[Ping's PGP Key]
I am NOT affiliated with any "Ping" shops, or services being marketed over this forum.
Before conducting any form of business confirm my identity through onsite PM.