Warning: DEEPDATA Malware Exploiting Unpatched Fortinet Flaw to Steal VPN Credentials
A threat actor known as BrazenBamboo has exploited an unresolved security flaw in Fortinet’s FortiClient for Windows to extract VPN credentials as part of a modular framework called DEEPDATA.
Volexity, which disclosed the findings Friday, said it identified the zero-day exploitation of the credential disclosure vulnerability in July 2024, describing BrazenBamboo as the developer behind DEEPDATA,
The post “Warning: DEEPDATA Malware Exploiting Unpatched Fortinet Flaw to Steal VPN Credentials” appeared first on The Hacker News
Source:The Hacker News – [email protected] (The Hacker News)