Post #4259272
2026-07-30 20:28 UTC
The easiest way to stop this attack (and the last one, btw) is to deny outbound Tor traffic and block downloads from archive.torproject[.]org in your environment. If the payloads can't do that, they can't continue past the first stage.
Replies (1)
-
@ysf@chaos.social 2026-07-30 22:45
@ifin@infosec.exchange I don't know if this holds if you already have tor installed.