A group of "actively managed" malicious nodes tried to disrupt the network of the most anonymous cryptocurrency Monero using the Sybil attack
The Sybil attack is an attacker's way of trying to undermine a network's reputation by creating multiple aliases and using them to gain influence on the network itself.
The malicious hosts involved in this attack exhibited at least six forms of anomalous behavior, including active injection into fair host lists; the use of an error that increased the likelihood of malicious nodes getting into the list of friendly nodes; as well as deliberate refusal to broadcast transactions to the network.
Most interestingly, these malicious hosts recorded IP addresses and tried to associate them with certain transactions.
The attack continued for 10 days
However, Monero had a built-in solution - Dandelion ++ and Tor, which helped to resist the onslaught of attackers😊
The attack failed to affect any of Monero's privacy mechanisms on the network, the nodes were blacklisted😎