Security Incident – BGP Hijacking
Attackers BGP-hijacked Softaculous' Hetzner IP block for 33 hours, obtained valid TLS certificates, and delivered a malicious Virtualizor update to some servers.
57
Vendor
Virtualizor
- Mentions · 7d0
- Mentions · 30d0
- All mentions3
- First seenSep 2, 2026
- Last mentionedSep 3, 2026
Timeline
3 articles · newest firstBGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access
Attackers used a BGP hijack to divert Softaculous traffic and push a malicious Virtualizor update granting root persistence on some hypervisors.
74
Risky Bulletin: BGP hijack targets Virtualizor to deliver malicious updates
Unknown attackers BGP-hijacked part of Hetzner's space for 33 hours to impersonate Softaculous and push malicious Virtualizor updates via a clone site.
65
Appears with
- Virtualizorproduct · 3
- Softaculousvendor · 3
- Hetznervendor · 2
- Softaculousvictim · 2
- NexonHostvendor · 2
- Cosmosorganization · 1
- NexonHostorganization · 1
- Virtualizororganization · 1
- Let's Encryptvendor · 1
- METRvictim · 1
- RIPEvendor · 1
- AlbaHostvictim · 1
- OpenAIorganization · 1
- SitePadproduct · 1
- Anthropicorganization · 1
- Tectonicorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.