Hackers push malicious Virtualizor update in BGP hijacking attack

Threat actors exploited BGP routing vulnerabilities to intercept and redirect traffic destined for Softaculous's update servers, allowing them to serve a trojanized version of Virtualizor to unsuspecting administrators who trusted the update process. The attack highlights a critical weakness in software supply chains: update mechanisms that lack cryptographic package signing can be weaponized once an attacker gains control of routing infrastructure. BGP hijacking is particularly dangerous because it operates at the internet routing layer, making it invisible to most endpoint and perimeter defenses. This incident underscores that trusting network-layer integrity alone — without cryptographic verification of software authenticity — leaves organizations exposed to man-in-the-middle attacks at scale.