GoKawiilBGP hijack lets attackers push malicious update to Virtualizor VPS panel
Softaculous disclosed that attackers hijacked BGP routes for Hetzner-hosted IP space between August 28-30, redirecting traffic meant for Virtualizor's update servers and client portal. The diversion allowed a tampered Virtualizor update package to reach a small number of installations that happened to check for updates during the attack window.