Latest BGP hijack targets hosting software vendor
RPKI-valid BGP hijack plus fraudulent TLS certificate delivered a malicious Virtualizor update to Softaculous customers, APNIC analysis shows.
1
Stories per day · 30 days
4 stories, newest first · one card per story
Stories tagged #bgp-hijack
BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access
Attackers used a BGP hijack to divert Softaculous traffic and push a malicious Virtualizor update granting root persistence on some hypervisors.
1
Risky Bulletin: BGP hijack targets Virtualizor to deliver malicious updates
Unknown attackers BGP-hijacked part of Hetzner's space for 33 hours to impersonate Softaculous and push malicious Virtualizor updates via a clone site.
2
33-hour BGP hijack of Softaculous traffic prompts security scramble
Attackers hijacked BGP routes carrying Softaculous traffic for 33 hours, prompting the hosting software vendor to urge credential resets and malware checks.
2