News › security
By Zayden R., September 3, 2026
A BGP hijack exploited Hetzner Online's security lapses to install malware on networks. Engineers must scrutinize routing configurations and software update processes to avoid similar vulnerabilities.
In a stark reminder of the vulnerabilities lurking in internet infrastructure, hackers executed a BGP hijack that successfully injected malware into networks by targeting Hetzner Online's lax security protocols. The attackers took advantage of weak routing security setups and the process of obtaining valid TLS certificates to seize control of IP addresses allocated to Softaculous, a UAE-based company known for its web software management platform and Virtualizor, a virtualization management tool.
The hijack allowed perpetrators to masquerade malicious payloads as legitimate updates, affecting a limited number of servers. However, the inability of Softaculous to cryptographically verify update packages meant that any Virtualizor installation during the attack window was at risk. Softaculous admitted the oversight in update validation, advising all Virtualizor users to consider their servers as potentially compromised.
The incident underscores the critical need for robust security practices. Engineers should prioritize secure configuration of routing protocols and ensure that software updates are validated through digital signatures. This attack also highlights the importance of regular audits and updates to network security policies.
While the exact number of affected servers remains unclear, the event serves as a cautionary tale about the cascading effects of seemingly minor security lapses. Network administrators and security professionals must remain vigilant, ensuring that every aspect of their infrastructure is fortified against such sophisticated attacks.