Fortinet firewalls hit by huge password-stealing attack — around 75,000 users possibly affected
- Researcher Bob Diachenko uncovers “FortiBleed,” a massive archive of 73,932 Fortinet/FortiGate VPN credentials from brute‑force and exploitation campaigns
- Data included plaintext usernames, emails, and passwords for major firms (Chevron, Samsung, Toyota, AT&T, NATO contractor, etc.), with billions of login attempts logged
- Fortinet says leak is a resharing of past incidents and brute‑forced data, urging password rotation and MFA to minimize risk
A database containing tens of thousands of login credentials for major global corporations was found sitting online, in one of the larger data leak incidents this year.
Security researcher Bob Diachenko posted a new report on LinkedIn, saying he discovered an archive of Fortinet and FortiGate VPN credentials, counting 73,932 firewall URLs.
"Massive Fortinet/FortiGate bruteforce/active exploitation campaign uncovered in action," he said.
Fortinet responds
Diachenko named the campaign “FortiBleed”, and said the archive contained usernames, email addresses, and passwords (in plaintext) for companies such as Chevron, Samsung, Foxconn,...
Copyright of this story solely belongs to techradar.com. To see the full text click HERE
