Phishing Clones — 2025 Tactics & Defence

Current Active Attacks (November 2025)

Attack TypeSuccess RateCountermeasure
Typo-squatting mirrors67%Only use this documentation
Clearnet clones with real SSL81%Never open .com/.co in Tor
Telegram “official support”94%Torzon support only via PGP ticket
Fake mirror lists on Dread89%Bookmark this docs page

Instant Verification Checklist

  1. URL ends with .onion
  2. PGP challenge on login
  3. No password field
  4. Signed mirror list matches our PGP key