Keep an eye on this one... Hackers breach FSB contractor, expose Tor deanonymization project and more | ZDNet "... But while most of the projects look to be just research into modern technology -- which all intelligence services carry out -- there are two that appear to have been tested in the real world. The first was Nautilus-S, the one for deanonymizing Tor traffic. BBC Russia pointed out that work on Nautilus-S started in 2012. Two years later, in 2014, academics from Karlstad University in Sweden, published a paper detailing the use of hostile Tor exit nodes that were attempting to decrypt Tor traffic. Researchers identified 25 malicious servers, 18 of which were located in Russia, and running Tor version 0.2.2.37, the same one detailed in the leaked files. ..."