PEERSTITCH malware: Attackers compromised more than 500 firewalls through FortiManager
Palo Alto Networks Unit 42 documented a multistage intrusion that began in September 2024 against a telecommunications organization’s FortiManager appliance. The attackers stole an archive containing configurations, credentials and cryptographic trust material for more than 500 managed FortiGate firewalls.
CERT24