Chinese state-sponsored hackers exploited a zero-day vulnerability in Fortinet's virtual private network to hack Dutch defense networks. The hackers used COATHANGER malware to establish persistence within the network. The breach was caused by Chinese state actors and the extent of the breach is unknown. The malware deployed can recover after every reboot and even after a firmware upgrade. The Netherlands' Joint Signal Cyber Unit shared indicators of compromise. US officials dismantled a botnet used by Chinese threat actors. #cybersecurity #vulnerability
https://cybersecuritynews.com/chinese-hackers-fortinet-zero-day/