cPGuard Update Channel Hijacked to Backdoor Linux Servers and Collect Password Hashes

An attacker hijacked the update channel of cPGuard security tool on November 2, sending a malicious script to customers' Linux servers. The script installed a backdoor and collected password hashes and sensitive files; the attacker has taken some data. OPSSHIELD issued an advisory for cPGuard 5.88.25 and later versions.