After creating and using a new exitmap module, I found downloaded binaries being patched through a Tor exit node in Russia. Tor is a wonderful tool for protecting the identity of journalists, their sources, and even regular users around the world; however, anonymity does not guarantee security.
more here............http://www.leviathansecurity.com/blog/the-case-of-the-modified-binaries/
more here............http://www.leviathansecurity.com/blog/the-case-of-the-modified-binaries/