Chinese threat actors use a custom post-exploitation toolkit named 'DeepData' to exploit a zero-day vulnerability in Fortinet's FortiClient Windows VPN client that steal credentials.
https://www.bleepingcomputer.com/news/security/chinese-hackers-exploit-fortinet-vpn-zero-day-to-steal-credentials/
BleepingComputer /
npub1j7…v7hg2
2024-11-18 21:20:12
Author Public Key
npub1j7dz37jrwqhehe8ydzpk5kcjpnzzv53h7s54lj62nv5w9fcar34suv7hg2Published at
2024-11-18 21:20:12Event JSON
{
"id": "13e0b1d7a245c1c156330982117656c8725c2691f0db8c83554b90c120659e64",
"pubkey": "979a28fa43702f9be4e468836a5b120cc4265237f4295fcb4a9b28e2a71d1c6b",
"created_at": 1731964812,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/users/BleepingComputer/statuses/113506045952034269",
"activitypub"
]
],
"content": "Chinese threat actors use a custom post-exploitation toolkit named 'DeepData' to exploit a zero-day vulnerability in Fortinet's FortiClient Windows VPN client that steal credentials.\n\nhttps://www.bleepingcomputer.com/news/security/chinese-hackers-exploit-fortinet-vpn-zero-day-to-steal-credentials/",
"sig": "9eab6a321d305afd1f6a5d1e50dd5664f0ca7254d347d24046adcc80a3f65eb8ed8f0510e101ca0034c481b415d965716f9aec8c0ef1e10cfdbadc9430404514"
}