As cited
Copy frozen at (site build).
breaches incidents
BGP hijack infecting networks caused by a comedy of errors that’s not funny at all
Attackers hijacked Border Gateway Protocol (BGP) routing to redirect traffic for Softaculous, a cloud-management platform used by hosting providers and data centers. By exploiting routing security weaknesses at Hetzner Online and certificate issuance processes, the attackers gained control over IP address space and distributed malware disguised as software updates to infrastructure operators. The supply-chain attack affected users who rely on Softaculous for managing virtualized environments and web software installations.
Why it matters: Hosting providers, data centers, and infrastructure operators using Softaculous for updates and management face immediate exposure to compromised software; organizations should verify the integrity of recent Softaculous updates and review BGP filtering and certificate pinning controls to prevent similar routing-based supply-chain attacks.
- Source published
- First seen by Cybersecurity Tracker