Poisoned cPGuard update hits nearly 3,000 web hosting servers
MALWAREcPGuardredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
The update infrastructure of cPGuard, a Linux web hosting security suite from OPSShield, was compromised and fake updates for versions 5.88.12 through 5.88.19 were uploaded. Nearly 3,000 customer servers received the malicious update. OPSShield confirmed that customer contact information and hashed passwords were taken from its billing and licensing server. No CVE is named in the source. Defenders should check whether any cPGuard server runs versions 5.88.12 to 5.88.19 and treat affected hosts as potentially compromised.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Check whether any cPGuard installation is running versions 5.88.12 through 5.88.19.
- Treat any server that installed those versions as potentially compromised and investigate it.
- Change the password for your OPSShield account, since hashed passwords were taken from its billing and licensing server.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Help Net Security
Who and what is in it
Companies
Products