data_types_exposed:credentials × threat_actors:k0t × criticity:critical × has_exploit:true × limpar

Resultados

2 casos · pág. 1/1

gbhackers.com · há 1d exploit público critical

k0t operator targets FortiGate, FortiWeb and GlobalProtect in credential theft campaign, exposing 70,000+ credentials

Group-IB research describes a widespread campaign by an operator tracked as k0t that targets FortiGate, FortiWeb and Palo Alto GlobalProtect appliances to steal credentials, persist and exfiltrate corporate data. More than 70,000 exposed credentials were identified across network-device records, LDAP dumps and other artifacts. Many FortiG…

CVE-2025-64446 CVE-2019-6693 CVE-2026-0257 k0t FortiBleed

thehackernews.com · há 1h exploit público critical

k0t Mass-Exploits Fortinet and Palo Alto Edge Devices, Exposing 70,000+ Credentials; Links to Qilin and The Gentlemen

Group-IB and NyxLab disclosed a large-scale campaign by the cybercriminal actor k0t (aliases CryptoFeel, Member19, QazWsxShop, first seen October 22, 2025) against exposed network edge devices, including Fortinet FortiGate and Palo Alto Networks GlobalProtect. The actor is assessed to be an initial access broker or affiliate tied to the Q…

CVE-2025-64446 CVE-2026-0257 k0t CryptoFeel