I2P Anonymity Network Overwhelmed by 700,000 Hostile Nodes in Devastating Sybil Attack
By
Cider9986
Toasted just enough. A reliable bake, gently seasoned.
Summary
In February 2026, the I2P anonymity network experienced a devastating Sybil attack where 700,000 hostile nodes flooded the network, overwhelming its normal 15,000-20,000 active devices by a factor of 39 to 1. This was part of a pattern of annual February attacks on I2P, with previous attacks in 2023 and 2024 using malicious floodfill routers. The 2026 attack was particularly severe and appears to have been caused accidentally by a botnet rather than intentional targeting.
Key quotes
· 4 pulledOn February 3, 2026, the I2P anonymity network was flooded with 700,000 hostile nodes in what became one of the most devastating Sybil attacks an anonymity network has ever experienced.
The network normally operates with 15,000 to 20,000 active devices. The attackers overwhelmed it by a factor of 39 to 1.
For three consecutive years, I2P has been hit with Sybil attacks every February.
The 2023 and 2024 attacks used malicious floodfill routers and remain unattributed.
You might also wanna read
Analysis of BGP Anomalies During Venezuela Blackout from Security Perspective
This article from the Low Orbit Security Radar newsletter analyzes BGP (Border Gateway Protocol) anomalies observed during the Venezuela bla
loworbitsecurity.com·4mo ago
Microsoft warns of crypto mining malware disguised as fake downloads of popular PC utilities
Microsoft's Windows Defender team has uncovered a cryptocurrency mining campaign targeting PC enthusiasts. Scammers are manipulating search
techspot.com·14h ago
Google reports first evidence of hackers using AI to develop zero-day security exploit
Google has reported evidence of hackers using AI to develop a zero-day security vulnerability, marking the first time the company has observ
politico.com·15h ago
FBI warns healthcare sector about Silent Ransom Group impersonating IT support staff
The FBI has issued an alert about the Silent Ransom Group (also known as Luna Moth, Chatty Spider, and UNC3753), a cyber threat group active
aha.org·15h ago
Microsoft faces cybersecurity community backlash over Digital Crimes Unit threats against exploit disclosures
Microsoft is facing backlash from the cybersecurity community after threatening to use its 'Digital Crimes Unit' against security researcher
windowscentral.com·21h ago
New phishing campaign targets Signal users to steal chat backup recovery keys
Hackers are targeting Signal users in a new phishing campaign that attempts to steal their chat backups. The attackers pose as Signal's supp
techcrunch.com·21h ago