TLDR Tech / InfoSec
FortiBleed Targeted FortiGate Firewalls in 110 Million-Credential Harvesting Operation
A Russian-speaking initial access broker has run FortiBleed since February, brute-forcing over 430,000 FortiGate firewalls and deploying FortigateSniffer to capture credentials across 24 protocols. This operation fed a Golang-based CyberStrike Harvester pipeline, cracking hashes, ranking targets by economic value, and reselling access while repeating username/password pairs across thousands of devices.
Read the full story