Chinese hackers exploit Fortinet flaw, breach targeted networks for spying

Chinese hackers are exploiting zero-day vulnerabilities in networking devices, followed by the installation of custom implants, reported The Hacker News.

A suspected China-nexus threat actor exploited a recently patched vulnerability in Fortinet FortiOS SSL-VPN as a zero-day attack targeting a European government entity and a managed service provider (MSP) located in Africa.

The latest findings from Mandiant indicate that the threat actor managed to abuse the vulnerability as a zero-day to its advantage and breach targeted networks for espionage operations, reported The Hacker News.