BreachesApr 22, 2026
‼️🇨🇴 A threat actor identified as GhostByte is selling "super" admin access to a Colombian comp...
GhostByte threat actor selling compromised FortiGate admin access to Colombian company for $700.
Summary
A threat actor known as GhostByte is publicly offering stolen administrative credentials to a Colombian organization's FortiGate VPN and firewall infrastructure on the dark web for $700. The compromised environment includes access to the victim's Active Directory network, granting broad lateral movement capabilities. This represents a critical infrastructure exposure with significant risk for ransomware deployment or data exfiltration.
Entities
GhostByte (threat_actor)FortiGate (product)Fortinet (vendor)Active Directory (technology)