THREAT OPS › Threat News › FortiBleed Campaign Exposing Credentials for 73,932 FortiGate Systems
FortiBleed Campaign Exposing Credentials for 73,932 FortiGate Systems
<p>A dataset containing valid administrative and VPN credentials for tens of thousands of Fortinet FortiGate firewalls has been attributed to a Russian-speaking threat group, with confirmed impacts across government, critical infrastructure, and multinational corporations. Organizations should verify exposure immediately and rotate credentials.</p> <h2>Latest Updates</h2> <p>Based
MITRE ATT&CK techniques
Indicators of compromise
- https://www.hudsonrock.com/fortineturl
- http://hudsonrock.com/fortineturl
- 85.11.187.8ipv4
- 85.11.187.0ipv4
- 85.11.187.0/24cidr
Original source: https://www.recordedfuture.com/blog/critical-fortibleed-campaign