Mmastodon TechnologyCybersecurity first seen 21 h ago, last 21 h ago, peak #10

FBI warns FortiBleed attacks on FortiGate firewalls continue

Original: 🤖 FBI: FortiBleed attacks on exposed FortiGate firewalls & SSL VPN gateways are still ongoing. Attackers use leaked/info

The FBI says FortiBleed attacks against exposed FortiGate firewalls and SSL VPN gateways are still ongoing. Attackers use credentials stolen by infostealers, crack the stolen password hashes with GPU clusters running tools like Hashcat, then lock administrators out of devices. The activity is linked to INC/Lynx and Payload ransomware operations, with tens of thousands of devices reportedly affected.

Why now: An active, ongoing FBI warning about ransomware-linked attacks on widely used network security devices raises immediate concern for organizations running FortiGate gear.

FBIFortinetFortiGateINC/LynxPayload ransomware

Open on mastodon →

Evidence

• 🤖 FBI: FortiBleed attacks on exposed FortiGate firewalls & SSL VPN gateways are still ongoing. Attackers use leaked/infostealer credentials, then crack stolen hashes on a GPU cluster (Hashcat/Hasotopolis) and lock out admins. Tied to INC/Lynx & Payload ransomware. 86,644… · cloud@infosec.exchange · 2

API: https://socialmediatrends-api.osmike.com/v1/trends/1471545