China-Backed Hackers Exploit Fortinet Flaw, Infecting 20,000 Systems Globally

Share:

State-sponsored threat actors backed by China gained access to 20,000 Fortinet FortiGate systems worldwide by exploiting a known critical security flaw between 2022 and 2023, indicating that the operation had a broader impact than previously known.

“The state actor behind this campaign was already aware of this vulnerability in FortiGate systems at least two months before Fortinet disclosed the vulnerability,” the Dutch National Cyber Security Centre (NCSC) said in a new bulletin. “During this so-called zero-day period, the actor alone infected 14,000 devices.”

The campaign targeted dozens of Western governments, international organizations, and a large number of companies within the defense industry. The names of the entities were not disclosed.

The findings build on an earlier advisory from February 2024, which found that the attackers had breached a computer network used by the Dutch armed forces by exploiting CVE-2022-42475 (CVSS score: 9.8), which allows for remote code execution.

The intrusion paved the way for the deployment of a backdoor codenamed COATHANGER from an actor-controlled server that’s designed to grant persistent remote access to the compromised appliances, and act as a launching point for more malware.

The NCSC said the adversary opted to install the malware long after obtaining initial access in an effort to retain their control over the devices, although it’s not clear how many victims had their devices infected with the implant.

The latest development once again underscores the ongoing trend of cyber attacks targeting edge appliances to breach networks of interest.

“Due to the security challenges of edge devices, these devices are a popular target for malicious actors,” the NCSC said. “Edge devices are located at the edge of the IT network and regularly have a direct connection to the internet. In addition, these devices are often not supported by Endpoint Detection and Response (EDR) solutions.”

Ravie Lakshmanan

Leave a Comment

Your email address will not be published. Required fields are marked *

loader-image
London, GB
3:15 pm, Feb 6, 2025
weather icon 8°C
L: 7° | H: 9°
broken clouds
Humidity: 74 %
Pressure: 1040 mb
Wind: 14 mph ENE
Wind Gust: 26 mph
UV Index: 0
Precipitation: 0 mm
Clouds: 75%
Rain Chance: 0%
Visibility: 10 km
Sunrise: 7:30 am
Sunset: 4:58 pm
DailyHourly
Daily ForecastHourly Forecast
Today 9:00 pm
weather icon
7° | 9°°C 0 mm 0% 12 mph 81 % 1040 mb 0 mm/h
Tomorrow 9:00 pm
weather icon
4° | 5°°C 1 mm 100% 13 mph 95 % 1036 mb 0 mm/h
Sat Feb 08 9:00 pm
weather icon
4° | 6°°C 1 mm 100% 11 mph 96 % 1027 mb 0 mm/h
Sun Feb 09 9:00 pm
weather icon
5° | 8°°C 0 mm 0% 10 mph 96 % 1039 mb 0 mm/h
Mon Feb 10 9:00 pm
weather icon
3° | 4°°C 1 mm 100% 11 mph 96 % 1038 mb 0 mm/h
Today 6:00 pm
weather icon
6° | 7°°C 0 mm 0% 11 mph 75 % 1040 mb 0 mm/h
Today 9:00 pm
weather icon
4° | 5°°C 0 mm 0% 12 mph 81 % 1039 mb 0 mm/h
Tomorrow 12:00 am
weather icon
4° | 4°°C 0 mm 0% 12 mph 79 % 1036 mb 0 mm/h
Tomorrow 3:00 am
weather icon
4° | 4°°C 0 mm 0% 12 mph 78 % 1033 mb 0 mm/h
Tomorrow 6:00 am
weather icon
4° | 4°°C 0 mm 0% 12 mph 72 % 1030 mb 0 mm/h
Tomorrow 9:00 am
weather icon
5° | 5°°C 0 mm 0% 13 mph 69 % 1028 mb 0 mm/h
Tomorrow 12:00 pm
weather icon
4° | 4°°C 0.2 mm 20% 13 mph 83 % 1025 mb 0 mm/h
Tomorrow 3:00 pm
weather icon
4° | 4°°C 1 mm 100% 12 mph 88 % 1022 mb 0 mm/h
Name Price24H (%)
Bitcoin(BTC)
€94,650.00
-0.09%
Ethereum(ETH)
€2,662.19
-0.62%
Tether(USDT)
€0.97
0.00%
XRP(XRP)
€2.29
-5.39%
Solana(SOL)
€189.01
-3.91%
USDC(USDC)
€0.97
0.00%
Dogecoin(DOGE)
€0.247397
-2.68%
Shiba Inu(SHIB)
€0.000014
-4.58%
Pepe(PEPE)
€0.000010
-4.95%
Scroll to Top