HackerFeeds

CyberSecurity News

FortiBleed credential-theft campaign linked to Lynx ransomware

BleepingComputer
· July 1, 2026
RansomwareData Breach

AI summary

A large-scale credential theft campaign known as FortiBleed has been connected to the INC and Lynx ransomware groups. The link suggests that the stolen Fortinet credentials may be used to facilitate future network breaches.

Threat groups mentioned

lynx
414 victims
active since 2023

Lynx is a ransomware-as-a-service operation that emerged in mid-2024 as a rebrand of INC Ransomware (whose source code was sold for $300,000 on the RAMP forum), claiming ~300 victims across manufacturing, business services, technology, and transportation with an 80/20 profit split for affiliates.

Read the full article at BleepingComputerwww.bleepingcomputer.com/news/security/fortibleed-credential-theft-campaign-linked-to-lynx-ransomware/

This is an AI-generated brief aggregated by HackerFeeds for convenience and grounded in the source’s own summary; the related CVE, threat-group and country data is from HackerFeeds’ own indexes. The original article is the authoritative source — all rights belong to BleepingComputer.