Nation-stateJun 7, 2026
🚨🇦🇷 A threat actor known as GordonFreeman, claiming to act under the group L4TAMFUCK3RS, says...
Threat actor claims Fortinet SSL VPN access to Argentine Army internal network.
Vendor Watch
Run Fortinet SSL VPN?
Get an email when a reviewed story names Fortinet SSL VPN, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch works
Summary
A threat actor identified as Gordon Freeman, operating under the L4TAMFUCK3RS group, claims to have gained full access to the Argentine Army's internal network via a compromised Fortinet SSL VPN. The actor has shared a link that purportedly allows connection to the Army's internal systems.
Indicators of Compromise
- url — https://t.co/MM4iV4SDQr
Entities
Gordon Freeman (threat_actor)L4TAMFUCK3RS (threat_actor)Fortinet SSL VPN (product)