CERT24Hackers hijacked the cPGuard autoupdate to deploy a backdoor and steal dataLoading data…
CERT24Threat Observatory
Period

Hackers hijacked the cPGuard autoupdate to deploy a backdoor and steal data

An attacker compromised OpsShield’s cPGuard update-distribution infrastructure and used versions 5.88.12–5.88.19 to distribute a backdoor and data-stealing script. As many as 2,946 servers were affected.

← Back to intelligence

Hackers hijacked the cPGuard autoupdate to deploy a backdoor and steal data

An attacker compromised OpsShield’s cPGuard update-distribution infrastructure and used versions 5.88.12–5.88.19 to distribute a backdoor and data-stealing script. As many as 2,946 servers were affected.