Hackers compromise NGINX servers to redirect user traffic
BleepingComputer
Actively Exploited
Hackers are targeting NGINX servers in a campaign that reroutes user traffic through their own infrastructure. This attack compromises the servers, allowing the perpetrators to intercept and manipulate the data being transmitted. Affected users may experience altered content or be redirected to malicious sites without their knowledge. The incident raises concerns about the security of NGINX, a widely used web server software, and the potential for significant data breaches. Organizations using NGINX should take immediate precautions to safeguard their systems and ensure that their configurations are secure to prevent such hijacking.
Impact: NGINX servers
Remediation: Implement security best practices for NGINX configurations, regularly update server software, and monitor traffic for unusual patterns.