Qilin Ransomware Actors Take Advantage of Newly Discovered Fortinet Bugs

The recently observed increase in ransomware activity linked to the Qilin group has sparked alarms throughout the cybersecurity industry. As a result of these sophisticated Ransomware-as-a-Service (RaaS) operations operating under multiple aliases, including Phantom Mantis and Agenda, Fortinet’s recent critical vulnerability disclosures have made it possible for this operation to actively exploit two critical Fortinet vulnerabilities. 

Operators of Qilin can exploit these flaws in order to gain unauthorised access to targeted networks and to run malicious code on them, sometimes without any detection by the targeted network. Qilin is stepping up its tactics by exploiting these Fortinet vulnerabilities, signalling a shift in strategy to target enterprise security infrastructure deployed throughout the world.
Consequently, organisations from a variety of sectors — ranging from healthcare and finance to government and critical infrastructure — have now become targets of an expanding global threat campaign. 

According to researchers at the company, the group’s ability to weaponise newly discovered vulnerabilities so quickly demonstrates both the group’s technical sophistication as well as the importance of adopting a proactive, vulnerability-focused security posture as a result of their rapid growth.
As the trend of ransomware groups exploiting zero-day or newly patched vulnerabilities to bypass perimeter defences and gain persistent ac

[…]
Content was cut in order to protect the source.Please visit the source for the rest of the article.