Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
FortiBleed Campaign Exposing Credentials for 73,932 FortiGate Systems
Excerpt
Last updated on 19 June. A dataset containing valid administrative and VPN credentials for tens of thousands of Fortinet FortiGate firewalls has been attributed to a Russian-speaking threat group, with confirmed impacts across government, critical infrastructure, and multinational corporations. Organizations should verify exposure immediately and rotate credentials. What's Happening On June 13, 2026, security researcher Volodymyr "Bob" Diachenko reported on the "FortiBleed"…
Read the original report →Diamond Model
Adversary
Infrastructure(1)
Capability
Victim
Attack Flow7 steps · MITRE ATT&CK mapped
Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| IP | 85.11.187.8 | High | Score 75/100 | First seen |
IOC Relationship Graph
Building graph…