NewsBite analysis · Cloud, Programming, Security · Data Breach, Security Vulnerability, Software Release
BleepingComputer
Hackers push malicious Virtualizor update in BGP hijacking attack
Hackers successfully delivered malicious updates to the Virtualizor VPS management software by hijacking BGP routing for its update infrastructure. This attack redirected update requests to malicious servers, and although only a small number of installations were affected, Softaculous has issued urgent warnings for users. They recommend a series of security measures for impacted customers and have released a new version with added security features.
Act nowConfidence: HighImmediate horizonCybersecurity risk: High
Published 1 Sept 2026, 14:50 UTC2 min read
Visit original article ↗Lead image — BleepingComputer
Summary
TL;DR
- BGP routing hijacking redirected traffic to malicious servers.
- Malicious updates affected a small number of Virtualizor installations.
- Users are advised to reset passwords and audit systems.
- Softaculous has begun implementing cryptographic signing for updates.
- A new Virtualizor version was released with enhanced security tools.
Interesting facts
- BGP hijacking can enable attackers to manipulate update traffic.
- The incident allowed hackers to bypass standard logging mechanisms.
- Softaculous has committed to improving its update infrastructure following the attack.