GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys

A bug in GoBalance, a tool many dark-web sites use to stay reachable during attacks, lets anyone recover the secret key controlling a site’s .onion address using only public information. An attacker who recovers the key can take over the .onion address. Searchlight Cyber, which disclosed the flaw, warns that affected sites should rotate their keys.