BGP hijack used to push malicious Virtualizor update to VPS hosts

Threat actors hijacked BGP routing for Virtualizor's update infrastructure, redirecting update requests to malicious servers and delivering a trojanized update to VPS management software. The attack targets hosting providers using Virtualizor, potentially compromising downstream servers. The full scope and attribution remain unclear, but the supply-chain vector is confirmed.