Andorra warns of cyberespionage campaign compromising Fortinet firewalls

The National Cybersecurity Agency of Andorra (ANC-AD) has issued a warning about a large-scale cyberespionage campaign known as “FortiBleed”, which has reportedly compromised more than 73,900 Fortinet firewalls across 194 countries, including systems located in Andorra. According to cybersecurity researchers, attackers have carried out more than 1.16 billion credential-based login attempts against FortiGate devices and SSL VPN gateways. The campaign relies on vast databases of usernames and passwords previously stolen through malware known as infostealers. The ANC-AD has already alerted businesses and organizations across the country through its established communication channels after confirming that Andorran systems appear in the database of affected victims. The devices considered to be at risk include Fortinet products such as FortiGate firewalls, FortiOS systems and SSL VPN services. The campaign has targeted organizations operating in critical sectors worldwide, including government, defense, telecommunications, financial services, healthcare and critical infrastructure. As a precaution, companies and institutions using Fortinet firewalls are advised to contact their IT providers and maintenance partners to verify whether their systems have been affected. The ANC-AD also recommends taking immediate preventive measures. These include changing all corporate credentials, resetting passwords for Fortinet VPN and administrative interfaces, and enabling multi-factor authentication (MFA) wherever possible. In addition, organizations should conduct thorough audits of access logs to identify suspicious activity, such as logins from unusual locations, unauthorized administrator sessions or abnormal traffic patterns. The agency further advises limiting the exposure of administrative interfaces to reduce the risk of unauthorized access.The post Andorra warns of cyberespionage campaign compromising Fortinet firewalls first appeared on All PYRENEES.