BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access

Virtualizor said hackers used a Border Gateway Protocol (BGP) hijack to divert Softaculous traffic. The hackers then used the diverted update traffic to deliver a malicious Virtualizor package to some installations. A hosting-provider account separately said 5 of its 34 checked Virtualizor hypervisors sustained root-level compromise. The incident window ran from approximately August 28 at 20:57

Fact: Attackers used a BGP hijack to divert Softaculous traffic and deliver a malicious Virtualizor update package, leading to persistent root-level compromise on some hypervisors during an incident window starting around August 28 at 20:57. Fact: A hosting provider reported that 5 of 34 checked Virtualizor hypervisors were compromised at the root level. RealGround analysis: Although the incident targets virtualization infrastructure rather than an AI model directly, it highlights a critical software supply chain risk pathway—compromised update channels can be used to tamper with AI infrastructure, models, or orchestration agents. Organizations operating AI workloads on virtualized or cloud infrastructure should harden update mechanisms, maintain SBOMs, and implement integrity verification and compromise detection on hypervisors that host AI systems.