To exploit the vulnerability, an intruder would need a user's device password and a bit of skill to access troves of data on the phone.
Malicious activity on the anonymity software's network tripped Facebook's "site integrity systems."
According to the 9b+ security research blog, the email targeted a member of the Tibetan Youth Congress in India.
