According to Kaspersky security researchers, more and more cybercriminals are turning to anonymity services, and in particular the Tor network, to carry out their illegal activities.
According to researcher Sergey Lozhkin, there are currently about 900 hidden Tor services with 5500 nodes and 1000 exit nodes
Cybercriminals use the Tor network to create underground forums and markets, as well as to create appropriate infrastructure for communicating with C&C servers, which are difficult to detect and overthrow.
On the other hand, using Tor also has several disadvantages, such as Tor-based malware being larger in size and more complex, as additional code is required to incorporate the use of the Tor network.
Among the malware that uses the Tor network to communicate with the command and control center (C&C Server) are ZeuS, Chewbacca and Backdoor.AndroidOS.Torec.a.
