GoBalance Vulnerability Enables .onion Address Hijacking via Key Recovery

A vulnerability in GoBalance allows attackers to recover secret keys for .onion addresses using public information, enabling site hijacking. This compromises the security of dark-web services reliant on the tool.

A bug in GoBalance, a tool many dark-web sites use to stay reachable during attacks, lets anyone work out the secret key that controls a site's .onion address using only public information, and then take that address over.

Searchlight Cyber, which disclosed the flaw on October 8, says an attacker who recovers the key can redirect the site's visitors to a copy of the site they control.

Read original article