FortiGate Devices Exploited to Breach Networks and Steal Service Account Credentials

Threat actors are exploiting FortiGate NGFW appliances using recently disclosed vulnerabilities or weak credentials to breach networks and steal service account credentials from configuration files. The campaign demonstrates how network infrastructure vulnerabilities can be leveraged as entry points to compromise entire networks and obtain sensitive authentication data.