CERT24Over 70,000 credentials stolen through enterprise firewalls and VPN devicesLoading data…
CERT24Threat Observatory
Period

Over 70,000 credentials stolen through enterprise firewalls and VPN devices

According to an investigation by Group-IB and NyxLab, hackers targeted internet-facing network edge devices worldwide, including Fortinet FortiGate and Palo Alto Networks GlobalProtect firewalls. More than 70,000 exposed credentials associated with network devices and LDAP dumps were identified in connection with the campaign.

← Back to intelligence

Over 70,000 credentials stolen through enterprise firewalls and VPN devices

According to an investigation by Group-IB and NyxLab, hackers targeted internet-facing network edge devices worldwide, including Fortinet FortiGate and Palo Alto Networks GlobalProtect firewalls. More than 70,000 exposed credentials associated with network devices and LDAP dumps were identified in connection with the campaign.