Hijacked Routes Spread Malware

GunzenhausenAttackers hijacked update servers for 33 hours.

Any server that trusted the update channel for Virtualizor could have received malware instead.

Internet routing runs on assertion, not authentication, so announcing someone else’s address space is simply a claim a network can make.

Hetzner and Softaculous cannot yet produce a definitive list of affected servers.

Sources: Ars Technica