Skip to content
Auto-CTI
Back to all actors

Russian Initial-Access Broker

Unknown Active
Mentions
1
First seen
23 Jun 2026
Last seen
23 Jun 2026

Relevant to you · Affects your stack

Technology:
Fortinet FortiGate
Sector / region:
Manufacturing

Origin

Unattributed

Profile

A Russian Initial Access Broker is behind the FortiBleed campaign. The actor exploits vulnerabilities in Fortinet devices to gain initial network access. This access is then sold to other cybercriminals. Little is known about the broker's identity.

Affected vendors

Fortinet

Activity (8 weeks)

22
23
24
25
26
27
28
29

Recent activity

ESC