The TOR Project also advised users to turn off JavaScript by clicking the blue 'S' by the green onion within the TOR browser.

'This exploit doesn't look like general purpose malware it looks targeted specifically to unmask Tor Browser Bundle users without actually installing any backdoors on their host,' said Vlad Tsyrklevich, a security researcher who analyzed the code, in an email. The script collected the hostname and MAC (Media Access Control) address of a person's computer and sent it to a remote computer, the exact kind of data that TOR users hope to avoid revealing while surfing the Internet. The JavaScript was likely planted on certain websites that the attacker wanted to see who came to visit. 'This wasn't the first Firefox vulnerability, nor will it be the last,' The TOR Project warned. People using Linux and OS X were not affected, but that doesn't mean they couldn't be targeted in the future. The script was written to target Windows computers running Firefox 17 ESR (Extended Support Release), a version of the browser customized to view websites using TOR. The TOR Project's reasoning comes from the characteristics of the malicious JavaScript that exploited the zero-day vulnerability.

Latest tor browser for windows