Security Incident – BGP Hijacking
Attackers BGP-hijacked Softaculous' Hetzner IP block for 33 hours, obtained valid TLS certificates, and delivered a malicious Virtualizor update to some servers.
57
Vendor
Softaculous
- Mentions · 7d0
- Mentions · 30d0
- All mentions5
- First seenSep 1, 2026
- Last mentionedSep 3, 2026
Timeline
5 articles · newest firstBGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access
Attackers used a BGP hijack to divert Softaculous traffic and push a malicious Virtualizor update granting root persistence on some hypervisors.
74
BGP hijack infecting networks caused by a comedy of errors that’s not funny at all
Attackers BGP-hijacked Softaculous IP space via Hetzner routing lapses to push malicious Virtualizor updates to hosting servers.
65
Risky Bulletin: BGP hijack targets Virtualizor to deliver malicious updates
Unknown attackers BGP-hijacked part of Hetzner's space for 33 hours to impersonate Softaculous and push malicious Virtualizor updates via a clone site.
65
33-hour BGP hijack of Softaculous traffic prompts security scramble
Attackers hijacked BGP routes carrying Softaculous traffic for 33 hours, prompting the hosting software vendor to urge credential resets and malware checks.
48
Appears with
- Softaculousvictim · 4
- Virtualizorproduct · 4
- Softaculousorganization · 3
- Hetznervendor · 3
- Virtualizorvendor · 3
- NexonHostvendor · 2
- Hetznerorganization · 2
- Zet.netorganization · 2
- Anthropicorganization · 1
- Tectonicorganization · 1
- METRorganization · 1
- SitePadproduct · 1
- Virtualizorvictim · 1
- Zet.netvendor · 1
- Infobloxorganization · 1
- AlbaHostvictim · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.