Top Tweets for #virtualizor
Hackers hijacked BGP routing to intercept Virtualizor updates and distribute malware. Learn how this complex supply chain attack bypassed critical security checks.
#Virtualizor #BGPHijacking #CyberSecurity #SupplyChainAttack #Malware
https://t.co/pwtIDTOgzh
#安全资讯 Virtualizor 控制面板供应链攻击初步调查：德国云计算大厂 Hetnzer IP 段被 BGP 路由劫持。
#Virtualizor 开发商 Softaculous 公布的初步调查显示，黑客通过罗马尼亚服务器提供商 NexonHost/AS62390 非法发布 /24 路由用来覆盖 Hetnzer AS6204 /16 路由。
由于路由通常优先选择更具体的前缀，所以接受路由的网络会优先选择黑客控制的 /24 路由。
另外 Let's Encrypt 域名证书验证也被劫持，所以黑客可以直接签发 Virtualizor 证书。
查看全文：https://t.co/w7r9ndGFol
🚨🚨🚨🚨紧急安全提醒：VPS 服务器用户请立即备份数据以防不测，#Virtualizor 管理面板出现供应链攻击。
该面板面向 VPS 服务提供商，近日该面板出现 BGP 路由劫持，导致大量宿主机 (母鸡) 被安装后门程序。
使用 Virtualizor 面板的提供商有数百家，其中已经有部分提供商确认有宿主机检测到后门程序。
用户应当备份自己的虚拟机数据，防止后续出现黑客部署勒索软件加密数据的情况。
查看全文：https://t.co/VI75lPeQKJ
The August 2026 Virtualizor Incident in BGPHorizon
https://t.co/EHIV03XPnG
#virtualizor #bgp #bgphijack #bgphorizon
Update on the #Virtualizor compromise.
If you've never heard of Virtualizor before: it's a VPS management platform used by many hosting providers to deploy and manage virtual servers on KVM, Xen, LXC, OpenVZ, Proxmox and other virtualization platforms.
It is not some tiny admin panel either. Virtualizor publicly lists hundreds of NOC partners worldwide, and according to its own documentation a single master server can manage hundreds of virtualization nodes.
So this sits pretty high up in the infrastructure.
The vendor has now confirmed what happened:
Attackers hijacked the BGP route for Virtualizor/Softaculous infrastructure, obtained a valid Let's Encrypt certificate and used that position to serve a malicious Virtualizor update.
The ugly part: the Virtualizor update clients did not cryptographically verify the downloaded packages.
BGP hijack + valid TLS certificate was therefore enough to get attacker code executed as root on affected hypervisors.
Virtualizor says only a small number of installations are known to have received the malicious update. But they cannot tell exactly which ones, so they recommend treating every Virtualizor server as in scope and checking it.
There is currently no evidence that customer VPS guests themselves were modified. Still, once the hypervisor is compromised as root, everything running on it has to be considered at risk.
Vendor report:
https://t.co/5xRv19RdS7
Our Nextron Research team has prepared IOCs and YARA rules for the known artifacts and payload:
https://t.co/Rpfq7VMe9m
The merge is done. Our internal QA pipelines are still running; the signatures should hit the update servers and THOR Cloud Lite within the next hour.
You can use both THOR Lite and THOR Cloud Lite for free to check your systems:
https://t.co/cozCM6m7ud
https://t.co/TSPqOAEtDY
If you run Virtualizor: scan the hypervisor, not the VPS guests.
Oh boy, this is serious, guys .. we started working on it
#VirtualizorCompromise #Virtualizor
https://t.co/taADFVbCzN
Oh boy, this is serious, guys .. we started working on it
#VirtualizorCompromise #Virtualizor
https://t.co/taADFVbCzN
Epic! 😆
It was not Zero, it was something more scarier - lazy admins.
#Virtualizor #VPS #Misconfiguration #LazyAdmins
@ArmoredMobile
Virtualizor has released the technical details regarding the recent wave of attacks on Cloudcone, HostSlick, and others. The breach was not a direct software exploit, but a session hijacking attack on their support ticket system.
Attackers gained access to approximately 1,500 tickets where providers had carelessly sent plain-text root credentials via email instead of using secure forms.
The compromised providers were vulnerable because they failed to rotate these passwords after support cases were resolved - some credentials were over a year old - and did not have IP whitelisting enabled for their Admin Panels or SSH.
Virtualizor is urging all admins to immediately rotate any root passwords previously shared in tickets and to restrict Admin Panel access to trusted IPs only.
Source: Hosteroid on LET
🚨 Urgent Security Alert! Please back up the data in your VPS immediately. A large number of VPS providers are facing ransomware attacks similar to #CloudCone.
According to information in the LET community, the source of this attack is a vulnerability in the #Virtualizor management panel. Other hosts already attacked include HostSlick and OuiHeberg.
ZoomEye Dork app="Virtualizor" || title="Virtualizor" || "Virtualizor Login" || iconhash="3bb1f9dd7f9aeba0b5091817696e08f7"
4.5k+ exposed instances.
ZoomEye Link: https://t.co/UadBRqarf0
Refer: https://t.co/maCxav9geh
#NetSec #OSINT #CyberSecurity #Virtualizor #Ransomware #VPS #Infosec #ThreatIntel
#安全资讯 紧急安全提醒！请立即备份自己 VPS 中的数据，大量 VPS 提供商面临如同 #CloudCone 的勒索软件攻击。
据 LET 社区中的信息，此次攻击源头是 #Virtualizor 管理面板中的漏洞，其他已经遭到攻击的 HostSlick 及 OuiHeberg，其他尚未有攻击消息但也使用 Virtualizor 的包括:
ColoCloud
Virtono
SolidSEOVPS
Naranjatech
LittleCreek
DediRock
Chunkserv
RareCloud
查看全文：https://t.co/F1MA1Mz0g7
Insights Success magazine is pleased to feature #Virtualizor, steered by #PulkitGupta, Founder and Chief Architect, is powerful web-based VPS control panel with the help of which a user can deploy and manage #VPS on servers with a single click.
https://t.co/tOJ2twrwo7
Installation and Post installation on Virtualizor🔻
https://t.co/qhqTqROnHQ
https://t.co/4c0bGGWFP7
via @orcacorecom
#Linux #hypervisor #virtualization #Virtualizor #KVM #orcacore
#Virtualizor is a powerful web-based VPS control panel that allows users to deploy and manage VPS #servers.
This #article will teach you How to Install Virtualizor on Rocky Linux 9.
#Eldernode #Linux #KVM #VPS #Virtualizor #Rocky #RockyLinux
https://t.co/C2JO1JbZC2
What happened is that we had to migrate #hypervisors across all of our servers from #SolusVM towards #Virtualizor. The reason? The backups that the former was generating just weren't reliable enough.
We have begun the #hypervisor migration process as we convert from #SolusVM to #Virtualizor. Please standby for completion. This should be done with in a few hours and we apologize for any trouble caused. Downtime should be minimal throughout according to the techs involved.
Last Seen Hashtags on Sotwe
shittyass
Seen from Netherlands
pasif
Seen from Turkey
รับงานราม2
Seen from Thailand
snapchat()**
Seen from Germany
ipcam()********
Seen from Canada
去势
anxiouspandaa
Seen from United Kingdom
omegle()*
Seen from United States
献母
Seen from United States
minichatt()*********** filter:videos since:2026-09-15
Seen from United States
Trends for you
Most Popular Users
Elon Musk 
@elonmusk
241.5M followers
Barack Obama
@barackobama
118.8M followers
Cristiano Ronaldo
@cristiano
114.5M followers
Donald J. Trump
@realdonaldtrump
111.8M followers
Narendra Modi
@narendramodi
107.1M followers
Rihanna
@rihanna
98.7M followers
NASA
@nasa
92.3M followers
Justin Bieber
@justinbieber
91.8M followers
KATY PERRY
@katyperry
90M followers
Taylor Swift
@taylorswift13
84M followers
Lady Gaga
@ladygaga
75.5M followers
Virat Kohli
@imvkohli
73.5M followers
Kim Kardashian
@kimkardashian
70.9M followers
YouTube
@youtube
68.8M followers
Neymar Jr
@neymarjr
66.5M followers
Bill Gates
@billgates
65.3M followers
Selena Gomez
@selenagomez
63.1M followers
The Ellen Show
@theellenshow
62.2M followers
CNN
@cnn
61.7M followers
X
@x
60.7M followers