FBI: FortiBleed Campaign Amassed 86,644 Fortinet Credentials

The FBI and U.S. Secret Service warned that the FortiBleed credential harvesting campaign remains an active threat targeting internet-facing Fortinet FortiGate firewalls and SSL VPN gateways. Attackers exploit reused or leaked credentials and legacy SHA-256 password storage.

• 86,644 Fortinet device credentials harvested
• Targets internet-facing FortiGate firewalls and SSL VPN gateways
• Exploits reused and leaked credentials
• Legacy SHA-256 password storage aids compromise