FortiBleed Harvested 86K FortiGate Credentials Using Custom Sniffer Tool
SOCRadar uncovered an active FortiBleed operation that has exfiltrated and cracked credentials from 86,644 Fortinet FortiGate firewalls in 194 countries. The attackers deploy a bespoke sniffer to pull config files, then brute‑force passwords, giving them unrestricted network access. Organizations must rotate credentials and apply the latest firmware patches immediately.