FBI Says It Controlled Tor Servers Behind Malware Attack

WASHINGTON  — The FBI acknowledges it was behind malware that infiltrated the servers of Freedom Hosting, one of the largest providers of online anonymity online, and identified the service's users.

While some users signed up with Freedom Hosting to encrypt their files, the FBI alleges that the Tor anonymity service became “the largest facilitator of child porn on the planet.”

On Friday, Eric Eoin Marques, a U.S.-born 28-year-old living in Dublin was refused bail for a second time by high court justices in Ireland. Marques is accused of being the chief architect behind Freedom Hosting, responsible for hosting child porn on 550 servers throughout Europe between the years 2008-2013.

Freedom Hosting also is accused of providing services for money-laundering operations and child-abuse discussion boards with names like Lolita City and PedoEmpire, according to news reports.

The FBI’s involvement was acknowledged for the first time during a bail hearing in Dublin, where Marques is fighting extradition to the U.S. on four charges in connection with images on website. He was denied bail for the second time since his arrest in July.

It is unclear when the FBI initially gained access to Freedom Hosting, but Wired  reports that the key piece of malware used in the government's hack is known as the Magneto code variable, which does not download anything but accesses the “victim’s MAC address – a unique hardware identifier for the computer’s network or Wi-Fi card – and the victim’s Windows hostname."

Wired says that information then bypassed Tor and was sent back to servers housed in Northern Virginia, fueling speculation that the FBI or National Security Agency were the culprits.

The software, Wired says, also is consistent with the FBI’s computer and Internet protocol address verifier (CIPAV), which law enforcement has used to subvert anonymity software belonging to hackers, extortionists, sexual predators, and others since 2002.

Wired says Marques is facing federal charges in Maryland, where his indictment is under seal, and that the gravity of the charges could mean Marques will “spend the rest of his life in prison.”

Anonymous, which handed down a DDoS attack against Freedom Hosting in 2011, said at the time that Freedom Hosting hosted 95 percent of child porn web pages on the Tor network.

Related:  

Copyright © 2025 Adnet Media. All Rights Reserved. XBIZ is a trademark of Adnet Media.
Reproduction in whole or in part in any form or medium without express written permission is prohibited.

More News

X3 Expo Unveils 2026 All-Stars, Show Dates Set for Jan. 16-17

X3 Expo returns to the historic Hollywood Palladium on January 16–17, bringing together fans, creators and industry insiders for North America’s largest assembly of adult entertainment stars, alongside a dazzling lineup of attractions spotlighting the cutting edge of modern media and pleasure tech.

Trump Administration Issues Executive Order Against 'Debanking'

The White House on Thursday issued an executive order limiting financial institutions’ ability to restrict access to financial services for people or groups involved in lawful industries, a longtime goal of adult industry advocates and stakeholders.

Go.cam Launches Free Age Verification Solution, Anti-Fraud Features

Go.cam has announced that its age verification solution is now free with updated anti-fraud and identity protection features.

Florida AG Sues EU-Based Adult Companies for Failing to Age-Verify Users

Florida Attorney General James Uthmeier filed a lawsuit Monday with the 12th Judicial Circuit Court of Florida against five EU-based adult companies for allegedly failing to require age verification before allowing access to adult content.

SkyPrivate Launches 'Telegram Pay-Per-Minute' Feature

SkyPrivate has launched a new pay-per-minute (PPM) private show option on Telegram.

Pineapple Support to Host 'Money and Mental Health' Online Event

Pineapple Support is hosting a free, online event to help performers balance financial wellbeing with mental health, Aug. 18-19.

Arcom Warns 5 Adult Sites Over Age Verification

French media regulator Arcom has sent enforcement notices to the operators of five adult websites that the agency says have failed to implement age verification as required under France’s Security and Regulation of the Digital Space (SREN) law.

MojoHost Debuts NVIDIA Blackwell-Powered Hosting

MojoHost has announced the launch of NVIDIA Blackwell-powered hosting featuring RTX 6000 Pro MaxQ GPUs.

FSC: Identity Theft Targeting Adult Performers

The Free Speech Coalition has put out an alert warning of an individual found to be targeting adult performers for identity theft.

Assylum.com Implements New Age Verification System

Assylum.com has introduced an age verification system across its member sites.

Show More