I-Tor iphrojekthi inhloso yayo enkulu ukwakhiwa kwenethiwekhi yezokuxhumana esatshalalisiwe ene-latency ephansi futhi efakwe kwi-inthanethi, i-en ayivezi ubunikazi babasebenzisi bayo, okungukuthi, ikheli labo le-IP lihlala lingaziwa. Ngaphansi kwalo mqondo, isiphequluli sesithole ukuthandwa kakhulu futhi sesisetshenziswa kabanzi kuzo zonke izingxenye zomhlaba, imvamisa ukusetshenziswa kwaso kubangelwa imisebenzi engekho emthethweni enikezwe izici zayo zokuvumela ukungaziwa.
Yize isiphequluli sinikezwa abasebenzisi ukuze sinikeze ukuphequlula okuphephile futhi ngaphezu kwakho konke ukunikela ngokungaziwa. Kwethulwe abacwaningi be-ESET muva nje bathole ukusabalala kwenguqulo eyimbumbulu yesiphequluli seTor ngabantu ongabazi. Njengoba kwenziwa ukuhlanganiswa kwesiphequluli okwakubekwe njengohlobo olusemthethweni lwaseRussia lwesiphequluli seTor, kuyilapho abadali baso bengahlangene ngalokhu kuhlanganiswa.
Umcwaningi oyi-ESET Principal Malware u-Anton Cherepanov ukusho lokho uphenyo lwalukhombe izikhwama ezintathu ze-bitcoin ezisetshenziswa ngabaduni kusukela ngo-2017.
'Isikhwama ngasinye siqukethe inani elikhulu lokuthengiselana okuncane; lokhu sikuthatha njengesiqinisekiso sokuthi lezi zikhwama zemali bezisetshenziswa isiphequluli seTor esetshenzisiwe "
Inhloso yale nguqulo eguquliwe yeTor bekuzothatha isikhundla sezikhwama zeBitcoin neQIWI. Ukudukisa abasebenzisi, abadali beqoqo babhalisa izizinda tor-browser.org ne-torproect.org (yehlukile kusayithi elisemthethweni torproJect.org ngokungabikho kwencwadi ethi "J", abasebenzisi abaningi abakhuluma isiRussia abangaziwa).
Idizayini yamasayithi yayibhalwe njengesiza esisemthethweni seTor. Isiza sokuqala sikhombise ikhasi lesexwayiso mayelana nokusetshenziswa kwenguqulo ephelelwe yisikhathi yesiphequluli seTor kanye nesiphakamiso sokufaka isibuyekezo (lapho isixhumanisi sinikeze khona ukuhlanganiswa nesoftware yeTrojan) kuthi okwesibili okuqukethwe kuphindwe ikhasi ukulanda Isiphequluli se-Tor.
Kubalulekile ukukusho lokho inguqulo enonya yeTor ilungiselelwe iWindows kuphela.
Kusukela ngo-2017, isiphequluli esibi se-Tor sithuthukisiwe ezinkundleni ezahlukahlukene zesiRashiya, ezingxoxweni ezihlobene ne-darknet, ama-cryptocurrensets, ukugwema ukukhiya kwe-Roskomnadzor nezinkinga zobumfihlo.
Ukusabalalisa isiphequluli ku- pastebin.com, amakhasi amaningi nawo enziwe alungiselelwe ukukhonjiswa phezulu ezinjini zokusesha ezihlokweni ezihlobene nokusebenza okuhlukahlukene okungekho emthethweni, ukucwaninga, amagama osopolitiki abadumile, njll.
Amakhasi akhangisa inguqulo eyimbumbulu yesiphequluli ku- pastebin.com ibukwe izikhathi ezingaphezu kuka-500.
Isethi yamanga ibisuselwa kusisekelo sekhodi seTor Browser 7.5 Futhi ngaphezu kwezici ezinobungozi ezakhelwe ngaphakathi, ama-tweaks amancane womenzeli womsebenzisi, akhubaza ukuqinisekiswa kwesiginesha yedijithali yama-plugins, nokukhiya uhlelo lokufaka lokuvuselela, bekufana nesiphequluli esisemthethweni seTor.
Ukufakwa okunobungozi kuqukethe ukufaka isilawuli sokuqukethwe ku-plugin ye-HTTPS Kuzo Zonke Izindawo (ingezwe iskripthi esingeziwe se-script.js ku-manifest.json). Izinguquko ezisele zenziwe ezingeni lezilungiselelo zokucushwa futhi zonke izingxenye kanambambili zagcinwa kusiphequluli esisemthethweni seTor.
Iskripthi esakhelwe ku-HTTPS Yonke indawo, lapho ikhasi ngalinye livulwa, yaya kuseva yomlawuli, eyabuyisa ikhodi yeJavaScript okufanele isetshenziswe kumongo wekhasi lamanje.
Iseva yokuphatha isebenze njengensizakalo efihliwe ye-Tor. Ngokusebenzisa ikhodi yeJavaScript, abahlaseli bangahlela ukubanjwa kokuqukethwe kwamafomu ewebhu, ukufaka noma ukufihla izinto eziphikisanayo emakhasini, ukuboniswa kwemiyalezo yamanga, njll.
Kodwa-ke, lapho kuhlaziywa ikhodi enonya, ikhodi kuphela ezothatha isikhundla semininingwane yezikhwama ze-QIWI neBitcoin emakhasini okwamukelwa kwenkokhelo ye-darknet eyarekhodwa. Phakathi nomsebenzi onobungozi, ama-Bitcoins angu-4.8 aqoqwe ezikhwameni ukuze azithathe indawo yawo, okulingana cishe nama-dollar ayizinkulungwane ezingama-40.