FortiBleed Password Stealing Attack Linked to INC and Lynx Ransomware Operations

FortiBleed credential-harvesting campaign, which has compromised more than 430,000 FortiGate firewalls worldwide, is directly feeding two active ransomware-as-a-service operations, INC Ransom and Lynx. SOCRadar’s Threat Research Unit identified an operator with access to FortiBleed infrastructure actively logged into negotiation panels for both ransomware brands, marking the first confirmed connection between mass FortiGate credential theft and […]

The post .