Malware · 1 source · latest 59m

Poisoned cPGuard update hits nearly 3,000 web hosting servers

MALWAREcPGuardredteam/daily · 1 source

Severity: High
Sources: 1

What happened

Attackers compromised the update infrastructure of cPGuard, a security suite for Linux web hosting servers, and pushed a malicious update to nearly 3,000 customer servers. OPSShield says the attacker also stole customer contact details and hashed passwords from its billing and licensing server.

For IT people · Written by AI from 1 source · Wrong?

What to do

Check whether any cPGuard installation is running versions 5.88.12 through 5.88.19.
Treat any server that installed those versions as potentially compromised and investigate it.
Change the password for your OPSShield account, since hashed passwords were taken from its billing and licensing server.

Written by AI from the sources, checked against them

Read the full story at the source