SecurityLobstersabout 1 hour ago
BGP Hijack Hits Softaculous Update Server
8 min read
Attackers hijacked a Hetzner IP range starting 28 August 2026 to impersonate Softaculous, using a forged-origin, RPKI-valid route and a valid TLS certificate to push a malicious Virtualizor update to a small number of installations. The route pulsed for nearly two days before Hetzner reclaimed it.
Level
Hype check
Tap to vote and see what everyone thinks.
