Fortinet
But details of campaign blasted by one industry veteran for giving away too much detail on web shells on victims' systems
"It is important that organizations practice the ‘assume breach’ principle..." YARA rules, hashes etc. available for defenders.
More pre-auth RCE bugs in Fortinet appliances? Colour us shocked!
"It is a pre-auth RCE [and] has been proven to be exploitable in a consistent manner; we found it during a Red Team engagement and have exploited it remotely..."
“System enters error-mode due to FIPS error: Firmware Integrity self-test failed” suggests compromises.
A vulnerability in multiple Fortinet products gives an unauthenticated remote attackers root access to its core product’s administrative interface – and the vulnerability has been exploited in the wild the company warned. Given exploitation the company has warned customers to check for Indicators of Compromise. https://twitter.com/Horizon3Attack/status/
Attackers continue to accelerate their weaponisation of newly-discovered flaws, the Five Eyes list of most-exploited vulnerabilities of 2021 shows. Contrary to some reports suggesting fears of mass-exploitation had been over-indexed, the flaw in Log4j joined the most widely-exploited vulnerabilities last year, despite only being discovered
