HACKERS HIJACK BGP TO PUSH MALICIOUS VIRTUALIZOR UPDATE

In the attack, hackers hijacked Border Gateway Protocol (BGP) routing for Virtualizor's update infrastructure, allowing them to intercept and redirect update traffic. Users who downloaded updates during the compromise period received malicious versions instead of legitimate software patches. Virtualizor is a popular VPS management platform used by hosting providers to manage virtual machine deployments and customer infrastructure. The software's update mechanism typically handles security patches and feature releases across thousands of installations. The BGP hijacking technique exploits weaknesses in internet routing protocols to redirect traffic destined for legitimate servers to attacker-controlled infrastructure. This supply chain attack vector bypasses traditional endpoint security measures since victims believe they are downloading authentic updates. Affected users should verify the authenticity of any Virtualizor installations and updates. The attack underscores persistent vulnerabilities in BGP security and the risks of relying on unverified update channels for critical infrastructure management tools.