Unknown actors took control over a quarter of all Tor network relays to launch man-in-the-middle attacks. Researchers say the full nature of the attacks is not known, with a few exceptions. The attacks are likely the most significant to date, covering around 27 percent of Tor Network Relays, a conservative estimate. The few available indicators seem to show that the attacker is operating out of Russia, but its difficult to verify that information. The researcher also proposed a few measures that would make it easier to verify when the relays are tainted.”]

