FBI Warns FortiBleed Campaign Still Active, Hits 86,000+ FortiGate Devices
FortiBleed attacks continue to target Fortinet FortiGate devices, with SOCRadar reporting more than 86,644 compromised devices across 194 countries.
The FBI and US Secret Service are warning about ongoing FortiBleed attacks against internet-facing Fortinet FortiGate firewalls and SSL VPN gateways in a joint advisory (PDF) published on October 6, 2026.
Hackread.com first covered FortiBleed in June based on findings from Hudson Rock and researcher Volodymyr “Bob” Diachenko. The campaign was later linked to INC Ransom and Lynx ransomware activity, showing how exposed FortiGate access could move from credential abuse into ransomware operations.
SOCRadar has now shared additional findings with Hackread.com on the campaign’s infrastructure, credential-cracking operation and indicators.
According to the latest research, more than 86,644 devices across 194 countries have been compromised, with some victims finding themselves locked out after attackers changed passwords or removed existing accounts.
The latest advisory also identifies Payload ransomwareamong the...
Copyright of this story solely belongs to hackread.com. To see the full text click HERE
