SIGAINT

From HandWiki
SIGAINT
Logo of SIGAINT.png
Type of site
Webmail, E-Mail service
Available inEnglish
Websitesigaint.org, Template:Onion defunct[1]
CommercialNo
RegistrationRequired
Usersabout 370,000[2]
Current statusOffline

SIGAINT was a Tor hidden service offering secure email services. According to its FAQ page, its web interface used SquirrelMail which does not rely on JavaScript. Passwords couldn't be recovered. Users received two addresses per inbox: one at sigaint.org for receiving clearnet emails and the other at its .onion address only for receiving emails sent from other Tor-enabled email services. Free accounts had 50 MB of storage space and expired after one year of inactivity. Upgraded accounts had access to POP3, IMAP, SMTP, larger size limits, full disk encryption, and never expired.

The service was recommended by various security specialists as a highly secure email service.[3][4][1]

In April 2015, a number of user accounts were compromised in what was speculated at the time to be a government-sponsored de-anonymization attack from 70 different exit nodes.[5][6] A SIGAINT administrator said that the hidden service was not hacked but malicious exit nodes had modified their clearnet page so that its link to the hidden service pointed to an imposter hidden service, effectively tricking users with a phishing attack that harvested login credentials.[2] SIGAINT has since added SSL to their gateway to protect against such attacks.[7]

The service is currently down. Both its ".org" website and its onion link return error code 500.[8]

See also

  • Comparison of webmail providers

References

  1. 1.0 1.1 "Interview With "Sigaint DarkNet Email" Admin". 2015-02-16. https://www.deepdotweb.com/2015/02/16/interview-sigaint-darknet-email-admin/. 
  2. 2.0 2.1 SIGAINT Admin (23 April 2015). "SIGAINT email service targeted by 70 bad exit nodes". Tor Project. https://lists.torproject.org/pipermail/tor-talk/2015-April/037549.html. Retrieved 2016-08-31. 
  3. Pauli, Darren (4 May 2016). "How to evade the NSA: OpSec guide for journalists also used by terrorists". https://www.theregister.co.uk/2016/05/04/opsec_guide_for_hacks_now_terrorist_fodder/. Retrieved 26 May 2016. 
  4. Maria, Korolov (13 May 2016). "Terrorists opt for consumer tools". http://www.csoonline.com/article/3069977/cyber-attacks-espionage/terrorists-opt-for-consumer-tools.html. Retrieved 26 May 2016. 
  5. Paganini, Pierluigi (26 April 2015). "Dark Web Email Service SIGAINT hacked by the Intelligence". http://securityaffairs.co/wordpress/36292/hacking/sigaint-hacked-by-intelligence.html. Retrieved 26 May 2016. 
  6. Franceschi-Bicchierai, Lorenzo (24 April 2015). "After Hacks, A Dark Web Email Provider Says a Government Spied on Its Users". https://motherboard.vice.com/en_uk/read/after-hacks-a-dark-web-email-provider-says-a-government-spied-on-its-users. Retrieved 25 September 2016. 
  7. SIGAINT. "SIGAINT Incidents Report". https://www.sigaint.org/incidents.html. Retrieved 25 September 2016. 
  8. Leyden, John. "Dark net webmail provider Sigaint still in the, er, dark". https://www.theregister.co.uk/2017/03/02/sigaint_goes_dark/. Retrieved 6 March 2017.