Tag: CVE-2025-24472

1 Attack Reports | 1 Vulnerabilities

Attack reports

New Ransomware Operator Exploits Fortinet Vulnerability Duo

A new ransomware operator, dubbed Mora_001, has been exploiting Fortinet firewall vulnerabilities CVE-2024-55591 and CVE-2025-24472 to gain unauthorized access and deploy a modified version of LockBit ransomware. The threat actor creates persistent admin accounts, exfiltrates firewall configuration…
ransomware
lockbit
lateral movement
data exfiltration
fortinet
firewall
CVE-2024-55591
CVE-2025-24472
2025-03-14
superblack
wipeblack
Published: March 14, 2025
Downloadable IOCs: 23
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-24472

8.1
    FortiOS
    FortiProxy
Published: February 11, 2025
Click here to see more Vulnerabilities