Tor2web

Description

This indicates an attempt to access Tor2web.
Tor2web is a proxy network that allows regular web users to access published websites that are masked by Tor's hidden service without using a Tor client.
Some malwares, such as Vawtrak, uses Tor2web to connect to C&C servers

Affected Products

Tor2web

Impact

Unexpected network communication

Technology

Browser-Based, Network-Protocol, Client-Server, Peer-to-Peer, Cloud-Based, Mobile-Device

Behavior

• Evasive
• Tunneling

References

• https://tor2web.org/