BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access

September 1, 2026 · 2:45 pm 4 sources

Image: BleepingComputer

Coverage

Coverage

• Hackers push malicious Virtualizor update in BGP hijacking attack
  BleepingComputer · September 1, 2026 14:45
  Hackers delivered malicious updates to the Virtualizor VPS management software after hijacking BGP routing for its update infrastructure and redirecting update requests to malicious servers. [...]
• BGP hijack infecting networks caused by a comedy of errors that’s not funny at all
  Ars Technica · September 2, 2026 11:00
  What can we learn from a BGP hijacking that poisoned production software? Plenty.
• Malicious Virtualizor Update Served via BGP Hijacking
  SecurityWeek · September 2, 2026 11:31
  Using a technically valid TLS certificate for Softaculous’ domains, a threat actor diverted traffic to fake software updates. The post Malicious Virtualizor Update Served via BGP Hijacking appeared first on SecurityWeek .

More coverage

• BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access
  The Hacker News · September 2, 2026 13:12
  Virtualizor said hackers used a Border Gateway Protocol (BGP) hijack to divert Softaculous traffic. The hackers then used the diverted update traffic to deliver a malicious Virtualizor package to some installations. A hosting-provider account separately said 5 of its 34 checked Virtualizor…