Microsoft has admitted to remotely removing anonymous web browsing tool Tor from many of its users' systems in an attempt to destroy the botnet Sefnit.
The revelation of its "cleanup efforts" were made in a blog post on 9 January that was later spotted by the Daily Dot.
It relates to a piece of malware that went quiet in 2011 before appearing again in June 2013 at the hands of Ukrainian and and Israeli hackers identified as Scorpion and Dekadent. Microsoft antivirus researcher Geoff McDonald revealed in a September 2013 post that all signs pointed to the click-fraud botnet in fact operating since 2010 by using Tor to keep its activities hidden.
|