#bgp
-
A BGP Hijack Against Softaculous: How a Forged Route Yielded a Valid TLS Certificate
An attack on hosting-panel vendor Softaculous combined a BGP hijack with a legitimately issued TLS certificate, letting the attacker push a malicious Virtualizor update to a small number of installations.
-
BGP Hijacking Attack: Virtualizor Users Served a Malicious Update
Attackers hijacked the BGP routing of Softaculous's update infrastructure and, for several days, redirected the traffic to their own servers, delivering an infected package to some installations of the VPS control panel.