Hackers reportedly breach enterprise firewalls and VPNs, exposing over 70,000 credentials

Reports say hackers broke into Fortinet FortiGate and FortiWeb and Palo Alto GlobalProtect systems to steal passwords, with The Hacker News citing over 70,000 exposed credentials. Group-IB separately published research on a group called k0t operating at the network edge.

Timeline

1. 23 Oct, 16:50 UTCFirst appeared on Google Trends
2. 23 Oct, 16:50 UTCPicked up on News
3. 23 Oct, 16:50 UTCThe Hacker News reports 70,000+ credentials exposed

Top sources

• fortinet palo alto firewall breachGoogle Trends
• Hackers Are Breaking Into FortiGate, FortiWeb and Palo Alto GlobalProtect Systems to Steal PasswordsCyberSecurityNews
• Stray Cat, Open Doors: How k0t Wanders Through the Network EdgeGroup-IB