New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

URGENT: Virtualizor Compromised (31st AUG)

Jamie_DreamITJamie_DreamIT Member, Host Rep
in Providers

Virtualizor has been compromised, their BGP hijack a few days ago seems to have a deployed a malicious package.

  • RESET/LIMIT ALL API CREDENTIALS IN THE VIRT MASTER PANEL BY IP
  • CHECK FOR SUSPICIOUS KEYS AND ENSURE SSH IS LOCKED DOWN
  • CHECK IF THIS FILE EXISTS ( /etc/systemd/system/java-jre-update.service )

If you're an affected host, NOC or provider and would want to work together, please DM me, we'll appreciate any assistance here.

Comms are being sent for existing customers, at this stage, we don't see evidence of VPS's being compromised.

Good luck to other providers out there.

Thanked by 4forest Gravely oloke frodothebearer

Comments

Sign In or Register to comment.