It's been shown more than once that this does happen frequently. https://motherboard.vice.com/en_us/article/mgbdwv/badonion-honeypot-malicious-tor-exit-nodes h

It's been shown more than once that this does happen frequently. https://motherboard.vice.com/en_us/article/mgbdwv/badonion-honeypot-malicious-tor-exit-nodes https://motherboard.vice.com/en_us/article/mgbdwv/badonion-h... https://www.wired.com/2007/11/swedish-researc/ https://www.wired.com/2007/11/swedish-researc/