TLDR Tech / InfoSec
Sweeping Credential-Harvesting Heist Compromises 30K+ Fortinet Devices
An automated campaign called FortiBleed is using reused and long-lived credentials to break into over 30,000 Internet-facing Fortinet firewalls and VPN gateways across 194 countries, with more than 30,791 verified device logins tied to 21,108 IPs and 8,316 domains in telecom, government, critical infrastructure, and other sectors. Once a device is accessed, attackers turn it into a listening post to grab more passwords, feeding them back into their scanner. Technical evidence points to Russian-speaking actors prioritizing NATO-country targets.
Read the full story