FortiBleed Credential Theft Linked to INC and Lynx Ransomware Operations

The FortiBleed campaign, which involves financially motivated credential theft, has been linked to the INC and Lynx ransomware operations. This connection suggests that the stolen credentials were intended to be used for further intrusions. An operator associated with FortiBleed's infrastructure was found to be involved with both INC and Lynx ransomware groups, specifically working on negotiation panels. This ties the mass theft of FortiGate credentials directly to the deployment of ransomware. The connection between FortiBleed and the ransomware operations indicates a coordinated effort to use stolen credentials for malicious purposes.