[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f_bbbsN_J5pOSHljfiCrez9rJnuvMfR6skjpmx7xj7WM":3},{"article":4,"iocs":44},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":24,"category":25,"article_tags":28},"f0c8b4e8-2a7a-45a5-880e-0d5cc474a351","Sweeping Credential-Harvesting Heist Compromises +30K Fortinet Devices","sweeping-credential-harvesting-heist-compromises-30k-fortinet-devices-bcf776","Attackers actively are targeting various sectors across nearly 200 countries and have already compiled a list of working credentials for tens of thousands of compromised devices","Attackers have compromised over 30,000 Fortinet devices globally through a credential-harvesting campaign targeting multiple sectors across nearly 200 countries. The attackers have compiled working credentials for the compromised devices, posing a severe risk to organizations relying on Fortinet infrastructure. The broad geographic and sectoral scope suggests a widespread, opportunistic attack leveraging weak or default credentials.","Credential-harvesting campaign compromises 30,000+ Fortinet devices across 200 countries",null,"https:\u002F\u002Fwww.darkreading.com\u002Fcyberattacks-data-breaches\u002Fsweeping-credential-harvesting-heist-compromises-30k-fortinet-devices","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fblt6769d2c3991b5331\u002F6a3282b9bd5a9a1a504483c3\u002Ffortinet_Lutsenko_Oleksandr_shutterstock.png?width=720&quality=80&disable=upscale","2026-06-17T11:15:31+00:00","2026-06-17T14:00:09.799268+00:00",8,[18,21],{"name":19,"type":20},"Fortinet","vendor",{"name":22,"type":23},"Fortinet FortiGate","technology","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":24,"icon":11,"name":26,"slug":27},"Breaches","breaches",[29,34,39],{"category":30},{"id":31,"icon":11,"name":32,"slug":33},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":35},{"id":36,"icon":11,"name":37,"slug":38},"c5eccf7c-abbc-4bd3-bbed-e6da5cba8e73","Incident Response","incident-response",{"category":40},{"id":41,"icon":11,"name":42,"slug":43},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[45],{"type":46,"value":47,"context":48},"malware","credential-harvesting campaign","Active campaign targeting Fortinet devices globally, harvesting valid credentials from 30K+ compromised systems"]