cPGuard Update Channel Hijacked to Backdoor Linux Servers and Collect Password Hashes

An attacker compromised the update system of the cPGuard security tool and sent a malicious script to customers' Linux servers. The script installed a backdoor and collected sensitive data, including password hashes, from affected servers. The attacker has obtained some of this stolen data. The incident occurred on November 2. Versions of cPGuard prior to 5.88.25 are affected. OPSSHIELD has issued an advisory regarding the breach.