A dataset containing valid administrative and VPN credentials for tens of thousands of Fortinet FortiGate firewalls. Russian-speaking threat actors obtained credentials for roughly 73,932 FortiGate firewall URLs across 194 countries, conducted 1.16 billion credential attempts against FortiGate targets, and used a 45-GPU cluster to crack authentication hashes.
FortiBleed Campaign Exposing Credentials for 73,932 FortiGate Systems
calendar_today
June 19, 2026
domain
recorded-future