60
60
60
60
60
60
60
60
60
60
Thai Broadband Provider Hacked via Fortinet Vulnerability
Hackers exploited Fortinet CVE-2024-21762 RCE to breach Thai broadband provider 3BB, deploying MeshCentral backdoors and credential-harvesting tools across its network.
Hunt.io uncovered an intrusion staging directory in Thailand containing 298 files of custom tooling built for Triple T Broadband (3BB) and its former owner Jasmine. Initial access came via fingerprinting a FortiGate SSL-VPN appliance and exploiting CVE-2024-21762 for remote code execution, after probing CVE-2018-13379, CVE-2022-42475, and CVE-2023-27997. The actor also probed F5 BIG-IP for CVE-2021-22986, CVE-2022-1388, and CVE-2023-46747, escalated privileges with PwnKit and Dirty COW, used MeshCentral as a C2 backdoor, harvested SSH/database/SNMP/Radius credentials, deployed PHP web shells, and ran cleanup scripts to hide the intrusion.
72
60
Automation and Vulnerability Exploitation Drive Mass Ransomware Breach
60
60
35
47
60
60
60
60
60
60
47
Critical Fortinet FortiOS flaw exploited in the wild (CVE-2024-21762)
60
Fortinet Warns of Critical FortiOS SSL VPN Flaw Likely Under Active Exploitation
60
60
60
60
New Fortinet's FortiNAC Vulnerability Exposes Networks to Code Execution Attacks
60
60
60
60