#1
BleepingComputer
general
June 22, 2026 at 20:01 UTC
FortiBleed campaign used custom FortiGate sniffer to steal credentials
By Lawrence Abrams
AI Summary
SOCRadar's analysis of the FortiBleed campaign reveals that threat actors deployed custom sniffers on compromised Fortinet FortiGate devices to harvest authentication credentials at scale, resulting in a database of over 86,000 confirmed working credentials. Fortinet has formally responded to the campaign, which targeted firewall appliances and represents a significant ongoing threat to enterprise network perimeters. Security teams running FortiGate devices should audit for indicators of compromise and rotate any credentials that may have traversed affected systems.
Relevance score: 88.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →