Tag: umbrella stand

1 Attack Reports | 0 Vulnerabilities

Attack reports

Malware Analysis Report: UMBRELLA STAND - Malware targeting Fortinet devices

UMBRELLA STAND is a sophisticated malware targeting FortiGate 100D series firewalls produced by Fortinet. It contains remote shell execution functionality, configurable beacon frequency, and AES-encrypted C2 communications. The malware uses fake TLS on port 443 to beacon to its C2 server and has th…
persistence
c2
process injection
aes encryption
defense evasion
fortinet
firewall
2025-06-23
shoe rack
remote shell
umbrella stand
Published: June 23, 2025
Downloadable IOCs: 11
Click here to see more Attack Reports