Threat Actor Leverages Generative AI To Compromise 600+ Fortinet Firewalls
TL;DR
A Russian-speaking threat actor used commercial generative AI services to hack over 600 Fortinet firewalls globally by exploiting weak security like exposed ports and single-factor authentication.
Tags
Source: Amazon Web Services (AWS)
Commercial AI services are enabling even unsophisticated threat actors to conduct cyberattacks at scale—a trend Amazon Threat Intelligence has been tracking closely. A recent investigation illustrates this shift: Amazon Threat Intelligence observed a Russian-speaking financially motivated threat actor leveraging multiple commercial generative AI services to compromise over 600 FortiGate devices across more than 55 countries from Jan. 11 to Feb. 18. this campaign succeeded by exploiting exposed management ports and weak credentials with single-factor authentication, fundamental security gaps that AI helped an unsophisticated actor exploit at scale. Full Story