FortiBleed Attackers Turn Firewalls Into Credential Stealers as Heists Persist

Threat actors have developed a Golang-based sniffer to target FortiGate firewalls, with the goal of stealing credentials. The campaign has identified 110 million credentials and is targeting approximately 430,000 firewalls. This attack is part of an ongoing global campaign. The attackers are using compromised firewalls to steal sensitive information. The scope of the campaign is substantial, affecting a large number of firewalls worldwide. The threat actors' ability to engineer such a tool highlights their sophistication and capabilities.