Security News > 2024 > November > China-linked group abuses Fortinet 0-day with post-exploit VPN-credential stealer
2024-11-19 23:02
No word on when or if the issue will be fixed Chinese government-linked snoops are exploiting a zero-day bug in Fortinet's Windows VPN client to steal credentials and other information, according to memory forensics outfit Volexity.…
News URL
https://go.theregister.com/feed/www.theregister.com/2024/11/19/china_brazenbamboo_fortinet_0day/
Related news
- Chinese hackers exploit Fortinet VPN zero-day to steal credentials (source)
- Warning: DEEPDATA Malware Exploiting Unpatched Fortinet Flaw to Steal VPN Credentials (source)
- Week in review: Fortinet patches critical FortiManager 0-day, VMware fixes vCenter Server RCE (source)
- Fortinet patches VPN app flaw that could give rogue users, malware a privilege boost (source)
- Helldown ransomware exploits Zyxel VPN flaw to breach networks (source)
- Fortinet VPN design flaw hides successful brute-force attacks (source)
- Hackers exploit critical bug in Array Networks SSL VPN products (source)
- VPN vulnerabilities, weak credentials fuel ransomware attacks (source)
- NachoVPN Tool Exploits Flaws in Popular VPN Clients for System Compromise (source)
- PoC exploit chains Mitel MiCollab 0-day, auth-bypass bug to access sensitive files (source)