This video is not yet public and is being shared early on the blog. Thanks for following.
A HUGE attack ocurred on darknet .onion Tor Hidden Service sites. This affected several darknet sites, including the famous over Tor, Dread Forums.
The vulnerability however was not in Tor itself... it was in load balancing software incorporated by these sites. A popular option affecting many .onion sites.
And within that GoBalance software lay a 0day vulnerability that allowed ANYONE to calculate the private key to a given .onion tor hidden service that happened to use Gobalance.
TIMELINE:
The attack occurred on October 5th 2026.The 0day was not known to the public until October 8th.
An example / case study in liability presented by various software one chooses to incorporate.
Their data was not compromised - however during time of attack (and as long as onion private key is controlled), users COULD easily be redirected to malicious pages (as the replacement page demonstrates).
**Which means any users affected across any onion sites using GoBalance, should CHANGE THOSE CREDENTIALS (in case further attacks occurred).
Dread administrators have been transparent about the entire ordeal.
Originally, they had assumed they must have uploaded the private key - accidentally.
Only after the second domain was compromised, a message in Russian revealed vulnerability in GoBalance software.
JOINING BLOG / CHANNEL CHATROOM
Always value your feedback, so welcome comments / suggestions on this, and don't forget to follow so you don't miss any unique security tips like this.