Cyberattack Targets Fortinet Worldwide

Russian attackers successfully targeted Fortinet security devices worldwide, compromising approximately 74,000 devices across 194 countries. This resulted in the leakage of unencrypted credentials, including usernames and passwords, along with information about affected organizations such as sectors, revenues, and number of employees. The attackers employed advanced techniques, including exploiting vulnerabilities in authentication systems and cracking SSL VPN encryption using high-performance computing, which enabled them to access sensitive internal networks, including critical systems like Microsoft Active Directory. The campaign led to complete breaches of multiple organizations in countries such as Japan and Turkey, with the development of a sophisticated, self-repeating attack process based on advanced dictionaries. In some cases, mistakes made by the attackers themselves exposed their traces, prompting organizations to urgently review their systems.

Size: 120%Text Size

Notice: This Is an AI-Generated Summary

Display The Full Article