FBI, Secret Service add to warnings of FortiBleed credential stealing campaign
FBI and Secret Service say FortiBleed compromised over 86,000 Fortinet firewalls in 194 countries.
90
Malware
Payload ransomware
- Mentions · 7d0
- Mentions · 30d0
- All mentions2
- First seenSep 21, 2026
- Last mentionedOct 7, 2026
Timeline
2 articles · newest firstGroup Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
Kaspersky details PAYLOAD ransomware operators abusing Active Directory GPOs for encryptionless extortion at a Middle East manufacturer, exfiltrating data published on the dark web.
72
Appears with
- Fortinetvendor · 2
- CISAorganization · 1
- UK government officialsvictim · 1
- Lynxthreat actor · 1
- FortiGate SSL VPNproduct · 1
- Middle East manufacturing organizationvictim · 1
- FBIorganization · 1
- INC ransomwaremalware · 1
- PAYLOAD operatorsthreat actor · 1
- US Secret Serviceorganization · 1
- Kasperskyvendor · 1
- Active Directoryproduct · 1
- Lynxmalware · 1
- INC Ransomthreat actor · 1
- SOCRadarorganization · 1
- FortiGateproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.