Security — LowEndTalk https://lowendtalk.com/ Mon, 31 Aug 2026 07:29:09 +0000 en Security — LowEndTalk URGENT: Virtualizor Compromised (31st AUG) https://lowendtalk.com/discussion/220625/urgent-virtualizor-compromised-31st-aug Mon, 31 Aug 2026 00:32:14 +0000 Security Jamie_DreamIT 220625@/discussions Virtualizor has been compromised, their BGP hijack a few days ago seems to have a deployed a malicious package.

  • RESET/LIMIT ALL API CREDENTIALS IN THE VIRT MASTER PANEL BY IP
  • CHECK FOR SUSPICIOUS KEYS AND ENSURE SSH IS LOCKED DOWN
  • CHECK IF THIS FILE EXISTS ( /etc/systemd/system/java-jre-update.service )

If you're an affected host, NOC or provider and would want to work together, please DM me, we'll appreciate any assistance here.

Comms are being sent for existing customers, at this stage, we don't see evidence of VPS's being compromised.

Good luck to other providers out there.

]]>