Source: thehackernews.com
A critical vulnerability in GoBalance, a load-balancing tool used by dark-web sites, allows attackers to recover secret keys controlling .onion addresses using only public information. The flaw was disclosed by Searchlight Cyber on October 8, 2026. An attacker who successfully recovers the key can redirect a site's visitors to a malicious copy under their control. This effectively enables full hijacking of .onion addresses, posing serious risks to dark-web site operators and their users. The vulnerability undermines the integrity and trustworthiness of Tor hidden services that rely on GoBalance for availability during attacks.
