SHA-1 collision attack is 100,000 times faster than brute force attack. Collision attacks appear when the same hash value (fingerprint) is produced for two different messages, which then can be exploited to forge digital signatures. Google and researchers have released a free detection tool that detects if files are part of a collision attack. Google is planning to release the proof-of-concept (PoC) code in 90 days, which the company used for the collision attack, which costs just $110,000 to carry out.
Source: https://thehackernews.com/2017/02/sha1-collision-attack.html

