FBI and Secret Service Warn of FortiBleed Lockout Threat
FBI and Secret Service warn FortiBleed has compromised 86,644 Fortinet devices and can lock out administrators.
84
Organization
US Secret Service
- Mentions · 7d0
- Mentions · 30d4
- All mentions7
- First seenSep 9, 2026
- Last mentioned22d ago
Timeline
7 articles · newest firstFortiBleed Attackers Locking Victims Out of Fortinet Devices
FortiBleed attackers compromised about 86,644 Fortinet devices and are locking organizations out by changing passwords.
84
FBI, Secret Service add to warnings of FortiBleed credential stealing campaign
FBI and Secret Service say FortiBleed compromised over 86,000 Fortinet firewalls in 194 countries.
90
FortiBleed still a bleeding nuisance as FBI confirms ongoing attacks
FBI and Secret Service confirm ongoing FortiBleed attacks on 86,644 Fortinet devices across 194 countries, with INC/Lynx and Payload ransomware affiliates using stolen access.
80
OFAC Sanctions Chinese Scam Platform Xinbi Guarantee
US Treasury's OFAC sanctioned Chinese scam-platform Xinbi Guarantee, which processed $24bn+, and froze $52.8m in linked cryptoassets.
48
US disrupts Xinbi Guarantee marketplace fueling the cyber scam economy
US Treasury sanctions and DOJ seizures take down Xinbi Guarantee, a Telegram marketplace that processed $24B+ for cyber scams, freezing $52.8M.
76
U.S. Disrupts Xinbi Guarantee Scam Marketplace, Freezes $52.8 Million in Crypto
US DOJ and Treasury disrupt Xinbi Guarantee Telegram scam marketplace, sanctioning it and freezing $52.8M in USDT across 52 wallets.
73
Appears with
- SOCRadarorganization · 4
- FBIorganization · 4
- XinbiPayproduct · 3
- Fortinetvendor · 3
- FortiGateproduct · 3
- Ellipticorganization · 3
- Fortinet SSL VPNproduct · 2
- US Department of Justiceorganization · 2
- CISAorganization · 2
- US Department of the Treasuryorganization · 2
- Lynxthreat actor · 2
- Tethervendor · 2
- Xinbi Guaranteeorganization · 2
- Xinbi Guaranteevictim · 1
- Payloadthreat actor · 1
- UK government officialsvictim · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.