GoKawiilBGP hijack of Softaculous IP space let attackers push malware via fake Virtualizor updates
Attackers exploited weak routing-security configurations at hosting provider Hetzner Online, combined with lapses in TLS certificate issuance, to hijack IP addresses belonging to Softaculous. Because Softaculous used those addresses to distribute software updates, the attackers were able to serve malicious update packages disguised as legitimate Virtualizor updates to customer servers.