Thousands of Tor Exit Nodes Attacked Cryptocurrency Users Over the Past Year

[J65nko]

From https://it.slashdot.org/story/21/05/...-the-past-year

For more than 16 months, a threat actor has been seen adding malicious servers to the Tor network in order to intercept traffic and perform SSL stripping attacks on users accessing cryptocurrency-related sites.

Well this time it were criminals ;-)
I never trusted , and hence never used Tor, because you never know whether it is the CIA/KGB or other Spy agency that runs a Tor exit node.

[e1-531g]

It's clearly unwise to transfer all traffic via Tor, but there are scenarios when it is better to connect via Tor.
If you log in somewhere certainly one should encryption protocol such as TLS, SSH. Tor Browser includes Https Everywhere. Nowadays Firefox has HTTPS-Only Mode (https://support.mozilla.org/en-US/kb/https-only-prefs). It should be enough to prevent SSL stripping attacks.
As a check/discovery for TLA attacks one should certainly look at least at Certificate Authority for accessed domain before sending confidential information (password in a login form etc). It is like bare minimum for people using Tor.