BGP HIJACK INFECTING NETWORKS CAUSED BY A COMEDY OF ERRORS THAT'S NOT FUNNY AT ALL

Summary from the TLDR InfoSec newsletter

Attackers hijacked Softaculous' 162.55.80.0/24 prefix and redirected Virtualizor update traffic to malicious servers. Hetzner's RPKI settings accepted /24 routes, while a forged AS path matched its ROA, so the attackers also obtained TLS certificates during the diversion. Virtualizor did not cryptographically verify update packages, and Softaculous cannot identify every affected server and urges customers to investigate.