InterSecLab was mentioned in an article published on November 8, 2024 on the Tor Project blog. The article highlights the collaboration between the Tor community, InterSecLab, and the team at GreyNoise to identify and stop an IP spoofing attack aimed at disrupting the Tor network.

In late October, Tor directory authorities, relay operators, and the Tor Project’s sysadmin team received multiple abuse complaints about port scanning. These complaints were traced back to a coordinated IP spoofing attack, where an attacker spoofed non-exit relay IPs and other Tor-related IPs to generate abuse reports with the goal of disrupting the Tor Project and the Tor network.

Thanks to the joint effort of the Tor community, InterSecLab, and the support of the team at GreyNoise, the origin of these spoofed packets was identified and shut down on November 7, 2024.

Read the full article:

Defending the Tor network: Mitigating IP spoofing against Tor

Note: The featured image is by the Tor Project and was used in the original article.