short notes about this list, the tor network and not getting phished. no newsletter, no comments, no rss bloat - it updates when it updates.
Browser extensions listed in official stores have repeatedly worked as credential and cookie stealers. A look at documented campaigns, the review gap that lets approved packages change behavior after approval, and a practical defense routine.
Tor 0.4.8 and earlier will stop working on the network after 1 September 2026, a compatibility cutoff tied to the Arti migration. Arti is complete as a client, but its relay, directory authority and onion-service support remain experimental or test-only.
FBI agents arrested Blake Benthall, the alleged operator of Silk Road 2.0, in San Francisco on 5 November 2014, about a year after the original Silk Road was seized. The market lasted roughly twelve months; the case took nearly a decade to close.
Roman Sterlingov ran the darknet's longest-running bitcoin mixer for a decade before his 2021 arrest. His 2024 trial and conviction turned blockchain analysis into tested courtroom evidence, and an appeals court has now affirmed it.
Stolen records rarely travel straight from a breach to the tool that abuses them. Brokers, aggregators, enrichers and repackagers keep the material moving, and every stage of that chain has a point where defenders can break it.
Tor's family declaration tells path selection which relays share an operator, so they never share a circuit. What MyFamily did, what undeclared families cost the network, and how the Happy Families key mechanism that replaced it works.
ALPR networks let a single query reach tens of thousands of cameras, and connected cars stream position data to brokers. FTC enforcement, leaked audit logs and documented stalking cases show why vehicle location should be treated as permanently compromised.
Gift cards need no bank account and no identity check at redemption, which makes them a durable cash-out rail for cybercrime. A look at the resale economics, the documented enforcement cases, and why the model survives the friction.
Middle relays carry Tor traffic between the first and last hop without ever connecting to the public internet. What the tier actually does, why network health depends on it, and what running one involves.
Google has taken legal action against the command-and-control servers of x.cpe, a firmware backdoor that TrendAI counted on 1,472,554 Android devices across 206 models. Google says Shenzhen manufacturer Videostrong built and sold access to the botnet, and has banned the company from certified Android hardware.
An estimated 6.3 to 6.43 billion dollars drained from Binance hot wallets on October 29, 2026, across eleven blockchains. The FBI attributes the theft to North Korea's TraderTraitor cluster, the same actors behind the Bybit heist; Binance says it is covering every customer loss while the laundering effort runs for years.
Fake recruiters on LinkedIn and fake interview sites turn job applications into malware infections. A look at the documented campaigns — Operation DreamJob, Contagious Interview, Graphalgo — their red flags, and what to check before running any coding test.
