Back Risky.Biz

Risky Bulletin: BGP hijack delivers malicious Virtualizor updates

Risky.Biz • September 2, 2026

A BGP hijack delivered malicious Virtualizor updates, the White House launches Project Watershed 250, Indian authorities take down a Telegram doxing bot, and Composer packages deliver iOS badness.

Brought to you by Dropzone AI

AI SOC Analysts that never sleep. ‍So you can.

Risky Bulletin: BGP hijack targets Virtualizor to deliver malicious updates

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

BGP Hijacking Incident Affects Softaculous Services with Malicious Updates Between August 28 and August 30, 2026, a BGP hijacking incident redirected traffic for Softaculous services, specifically affecting the IP range 162.55.80.0/24 hosted by Hetzner. The unauthorized announcement by NexonHost allowed an attacker to deliver a malicious Virtualizor update to a limited number of servers. The attacker obtained a valid TLS certificate for the affected domains, preventing users from receiving warning messages during the hijack. The incident impacted systems including software update endpoints and client billing sites. Although routing has been restored, the exact number of affected servers remains unknown, and an investigation is ongoing. Users of Virtualizor are advised to conduct checks to ensure their systems are secure. The incident highlights vulnerabilities in BGP routing protocols and the potential for significant exploitation. 10 sources 66

Risky Bulletin: BGP hijack delivers malicious Virtualizor updates

The full story

Extracted Entities

Attack Types (1)

Campaigns (1)