GoKawiilFBI Warns of Persistent FortiBleed Attacks Locking Out FortiGate Admins
The FBI has issued a warning that ongoing FortiBleed exploits continue to target exposed Fortinet FortiGate firewalls and SSL VPNs, often resulting in legitimate administrators being locked out. Attackers leverage leaked credentials, credential stuffing, and password spraying to access these systems, then use advanced GPU-based tools to crack password hashes offline. The campaign has been linked to ransomware groups such as INC/Lynx and Payload, with over 86,000 devices affected since the leak was first discovered in June.