Malicious Virtualizor Update Served via BGP Hijacking

A threat actor used BGP hijacking to divert traffic to fake software updates, utilizing a valid TLS certificate for Softaculous' domains. This allowed them to serve malicious Virtualizor updates. The actor's use of a technically valid certificate facilitated the diversion of traffic. The hijacking enabled the distribution of fake updates, potentially compromising systems that received them. The threat actor's actions relied on exploiting the routing protocol to intercept and alter traffic.