[tor-talk] Tor Phishing in the Wild // Old Sigs

[grarpamp]

On Tue, Jun 24, 2014 at 1:54 PM, Rich Jones <rich at openwatch.net> wrote:
> There's (what looks like) an active Tor phishing operation located at
> http://torbundleproject (dot) org . I believe this is related to black
> market scammer.
> diff the files 'torbrowser-install-3.6.1_en-US.exe' to see what's going on

It's called a trojan.

> list of the old signatures on the Tor website to compare with. Can anybody

https://archive.torproject.org/

Wipe your windows box and start over.

http://www.dban.org/
http://www.andybev.com/index.php/Nwipe
https://www.archlinux.org/
https://www.freebsd.org/
https://www.debian.org/