CroatiaTech

Tor browser and software are being hijacked to perform SSL stripping. Impacting the exit nodes, the mystery group controlled up to 25% of all nodes at one point, still controlling about 10%.
Their main goal is to attack Bitcoin mixers and crypto users.

A mysterious group has hijacked Tor exit nodes to perform SSL stripping attacks | ZDNet At one point, the group ran almost a quarter of all Tor exit nodes. Group still controls 10% of all Tor exit nodes today.

People around data and privacy these days. If you are concerned about one, you should be concerned about all. TikTok might be Chinese, but it's not the only data collecting concern. Including this site.