As cited
Copy frozen at (site build).
breaches incidents
33-hour BGP hijack of Softaculous traffic prompts security scramble
A 33-hour Border Gateway Protocol (BGP) hijacking attack diverted traffic intended for Softaculous and its Virtualizor control panel to attacker-controlled servers between August 28 and August 30. The attacker obtained a valid TLS certificate and delivered malicious updates to a small number of Virtualizor installations whose update checks were routed through the compromised network. Softaculous has advised all customers to reset credentials, inspect servers for indicators of compromise, and rotate application programming interface (API) credentials and SSH keys.
Why it matters: Virtualizor operators and Softaculous customers face exposure to compromised server infrastructure and credential theft if they were routed through the hijack; practitioners managing affected systems must immediately inspect for the identified systemd unit and check for unauthorized access, SSH keys, and scheduled tasks.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
breaches incidents
33-hour BGP hijack of Softaculous traffic prompts security scramble
A 33-hour Border Gateway Protocol (BGP) hijacking attack diverted traffic intended for Softaculous and its Virtualizor control panel to attacker-controlled servers between August 28 and August 30. The attacker obtained a valid TLS certificate and delivered malicious updates to a small number of Virtualizor installations whose update checks were routed through the compromised network. Softaculous has advised all customers to reset credentials, inspect servers for indicators of compromise, and rotate application programming interface (API) credentials and SSH keys.
Why it matters: Virtualizor operators and Softaculous customers face exposure to compromised server infrastructure and credential theft if they were routed through the hijack; practitioners managing affected systems must immediately inspect for the identified systemd unit and check for unauthorized access, SSH keys, and scheduled tasks.
- Source published
- First seen by Cybersecurity Tracker