#peerstitch — Public Fediverse posts

Unit 42 says attackers gained access to a managed telecom services provider in September 2024 by exploiting FortiManager’s FortiJump flaw (CVE-2024-47575).

They obtained a file with data on more than 500 managed FortiGate firewalls, including configurations, network maps, credentials, certificates and private keys.

The attackers later used a separate flaw, CVE-2025-61624, to install PEERSTITCH, which changes how For…

https://en.hacks.gr/paraviasi-se-parocho-tilepikoinonion-exethese-stoicheia-gia-500-systimata-asfaleias/

#FortiManager #FortiGate #PEERSTITCH #CVE2025_61624

Unit 42 reveals how CL-STA-0954 deploys PEERSTITCH malware after a FortiManager breach, using FortiOS PEERSTITCH malware to hijack firewalls.

#PEERSTITCH #Fortinet #FortiManager #CVE202447575 #Unit42 #Cybersecurity #InfoSec

https://securityonline.info/fortios-peerstitch-malware-fortimanager/?utm_source=mastodon&utm_medium=jetpack_social