Latest BGP hijack targets hosting software vendor
RPKI-valid BGP hijack plus fraudulent TLS certificate delivered a malicious Virtualizor update to Softaculous customers, APNIC analysis shows.
65
Organization
Softaculous
- Mentions · 7d0
- Mentions · 30d0
- All mentions4
- First seenSep 1, 2026
- Last mentionedSep 23, 2026
Timeline
4 articles · newest firstBGP hijack infecting networks caused by a comedy of errors that’s not funny at all
Attackers BGP-hijacked Softaculous IP space via Hetzner routing lapses to push malicious Virtualizor updates to hosting servers.
65
Risky Bulletin: BGP hijack targets Virtualizor to deliver malicious updates
Unknown attackers BGP-hijacked part of Hetzner's space for 33 hours to impersonate Softaculous and push malicious Virtualizor updates via a clone site.
65
33-hour BGP hijack of Softaculous traffic prompts security scramble
Attackers hijacked BGP routes carrying Softaculous traffic for 33 hours, prompting the hosting software vendor to urge credential resets and malware checks.
48
Appears with
- Softaculousvendor · 3
- Softaculousvictim · 3
- Hetznervendor · 2
- Zet.netorganization · 2
- Hetznerorganization · 2
- Virtualizorproduct · 2
- NexonHostorganization · 2
- Virtualizororganization · 2
- OpenAIorganization · 1
- Hetznervictim · 1
- Hetzner Onlineorganization · 1
- Anthropicorganization · 1
- Tectonicorganization · 1
- Let's Encryptorganization · 1
- METRorganization · 1
- Virtualizorvictim · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.