GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys

A vulnerability in the GoBalance tool, used by many dark-web sites to maintain reachability during attacks, allows attackers to determine the secret key controlling a site's .onion address using publicly available information. This enables the attacker to hijack the .onion address. By recovering the key, an attacker can redirect visitors to a fake version of the site that they control. The flaw was disclosed by Searchlight Cyber on October 8.