Loading story…
Amazon Threat Intelligence reported a Russian-speaking, financially motivated actor using multiple commercial generative AI services to scale compromise of 600+ Fortinet FortiGate devices across 55+ countries (observed Jan 11–Feb 18, 2026). The campaign did not rely on exploiting FortiGate vulnerabilities; instead it targeted internet-exposed management ports protected by weak credentials and single-factor authentication. Post-compromise activity included attempts to access Active Directory environments, extract credential databases, and target backup infrastructure, behavior consistent with preparation for ransomware or other monetization, while noting the actor struggled more in hardened environments. AWS stated its infrastructure was not observed to be involved.
An SC Media commentary cautioned that many “AI-driven” labels applied to FortiGate-related campaigns may be overstated, arguing public evidence more strongly supports automation (scripted scanning and credential attacks) rather than adaptive, decision-making AI. The piece emphasizes that conflating automation with AI can mislead defenders about what to prioritize, even as the AWS reporting highlights how readily available GenAI tools can lower the barrier for less-skilled actors to operationalize known techniques at greater scale.
Map this exposure pattern across your cloud, code, and identities.
6 events from the most recent confirmed update back to the earliest known activity.
On 2026-02-23, follow-on reporting distinguished the AI-augmented credential-abuse campaign from a separate January wave that exploited a patched FortiGate authentication-bypass vulnerability. The clarification indicated the overlapping FortiGate activity reflected multiple concurrent threats rather than one continuous operation.
By 2026-02-23, reporting on Amazon's investigation said the company had disrupted the campaign, shared indicators and intelligence with partners, and coordinated with industry to reduce the actor's effectiveness. This marked the first explicit public indication of active defensive coordination beyond the initial disclosure.
On 2026-02-20, Amazon Threat Intelligence publicly reported the campaign, assessing that the low-to-medium skill actor used multiple commercial generative AI services to amplify attack planning, tooling, and operations. Amazon also stated AWS infrastructure was not involved and recommended removing management exposure, enabling MFA, improving credential hygiene, segmentation, and patching.
Amazon said the observed FortiGate campaign ran from 2026-01-11 through 2026-02-18. By the end of that period, the operation had reached global scale but still showed frequent failures against patched or hardened environments.
Between mid-January and mid-February 2026, the actor compromised more than 600 FortiGate devices across 55+ countries, stole device configuration files, and harvested credentials and network details. Using that access, the actor attempted post-exploitation actions including Active Directory compromise, credential dumping, lateral movement, and targeting Veeam Backup & Replication systems as a likely precursor to ransomware.
On 2026-01-11, a Russian-speaking, financially motivated threat actor began a large-scale campaign against internet-exposed FortiGate management interfaces. The activity relied on scanning exposed ports and abusing weak or reused single-factor credentials rather than exploiting FortiGate vulnerabilities.
Vulnerabilities, threat actors, malware, products, organizations, breaches, and observables Mallory has linked to this story. Indicator values are masked here and available in full in the app.
Indicator values are masked on this page. See the values in Mallory Domains, IPs, hashes, and URLs are exportable to your SIEM.
See where this exposure pattern shows up across your cloud, code, supply chain, and non-human identities.
16 references tracked. Mallory keeps watching after this page renders.
csoonline.com
Open sourcescworld.com
Open sourcesecurityaffairs.com
Open sourcecsoonline.com
Open sourceaws.amazon.com
Open sourcescworld.com
Open sourceaws-news.com
Open sourcenoise.getoto.net
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
A financially motivated lone attacker used AI-assisted workflows to breach a large **AWS** environment in roughly 72 hours, according to a Sygnia incident-response report, chaining weaknesses across Internet-facing applications, AWS resources, source code repositories, **CI/CD** pipelines, runtime components, and data stores. The intrusion reportedly began with the theft of an AWS access key and expanded through secrets harvesting, cloud enumeration, backdoor creation, data exfiltration, deployment pipeline abuse, runtime modification, database access, and operational disruption. To extort the unnamed global enterprise, the actor carried out mostly reversible actions including denying access to **S3** buckets, scaling **ECS** services to zero, blocking network access with ACL rules, and purging **SQS** queues. The incident reflects a broader shift from isolated malicious use of generative AI to **agentic AI** supporting larger portions of the attack chain. Research cited by OALABS and observations from Anthropic indicate attackers are using tools such as **Claude** and **OpenAI Codex** to automate reconnaissance, analyze stolen data, generate code, and adapt operations during live intrusions, lowering the barrier for less-skilled actors while helping experienced operators scale activity. Security researchers said the trend now spans multiple **MITRE ATT&CK** tactics, including reconnaissance, credential theft, malware development, and social engineering, pushing defenders to prioritize detection of AI-enabled workflows, stronger identity controls, broader visibility, and faster automated containment.
Jul 9, 2026
Organizations are facing expanding AI-related attack surface from *shadow AI* adoption and proliferating machine identities, with unsanctioned AI tools and integrations increasing data access pathways, identity-to-application trust relationships, and third-/fourth-party dependencies. Commentary and executive guidance pieces emphasize that visibility alone is insufficient as AI-driven automation accelerates operational change faster than governance, and that defenders should expect new roles, shared responsibility across teams, and increased reliance on automation to manage AI risk. Separately, threat intelligence reporting tied to recent intrusions against **Fortinet FortiGate** devices says attackers have weaponized **CyberStrikeAI**, a new open-source AI security testing platform that bundles 100+ tools with an AI decision engine to automate intrusion workflows. Team Cymru reported CyberStrikeAI activity from 21 unique IPs (Jan. 20–Feb. 26), including infrastructure linked to communications with breached FortiGate devices, with much of the hosting observed in China, Singapore, and Hong Kong and additional nodes in the U.S., Europe, and Japan; the activity was assessed as associated with **Chinese state-sponsored** operations, and the developer was linked to other AI-assisted offensive projects (e.g., *PrivHunterAI*, *InfiltrateX*).
Jun 29, 2026
The provided items do not describe a single cohesive incident; they are a mix of unrelated security research, tooling write-ups, newsletters, and commentary. The most concrete incident reporting is an **AI-assisted intrusion campaign** in which a Russian-speaking financially motivated actor compromised **600+ Fortinet FortiGate** devices by targeting internet-exposed management interfaces with **weak credentials and no MFA**, then using AI-generated scripts for recon, configuration theft, and follow-on activity (including attempts to move laterally into **Active Directory**, extract database credentials, and access backup infrastructure). Separately, Kaspersky-linked reporting described **Arkanix Stealer** as a short-lived infostealer operation marketed in late 2025 with a modular design and anti-analysis features, with indicators of **LLM-assisted development** and a brief operational lifespan after promotion on dark-web forums and use of Discord for “customer” support. Other references are not about that Fortinet campaign and instead cover distinct topics: academic research demonstrating **27 attacks** against major password managers under a **malicious server** model (undermining “zero-knowledge” assumptions via missing ciphertext integrity/binding), GreyNoise telemetry on **OAST/interactsh** callback-domain scanning trends, and a vendor-style overview of an AI-driven pentesting framework (*PentAGI*) integrating 20+ tools. Several entries are primarily **roundup/newsletter** content or **generic guidance/commentary** (e.g., phishing what-to-do advice, compliance vs. security, historical/legal computing anecdote), and one is a threat-actor profile tying **Lotus Blossom** to a separate *Notepad++* update-channel incident rather than the Fortinet activity.
Jun 29, 2026