We investigated an intrusion where attackers exploited CVE-2024-47575 to target 500+ firewalls and deploy PEERSTITCH, a memory-resident ARM64 malware. The post Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant appeared first on Unit 42.

Unit 42 reveals how CL-STA-0954 deploys PEERSTITCH malware after a FortiManager breach, using FortiOS PEERSTITCH malware to hijack firewalls. Related Posts: Fake WatchGuard VPN Site Steals Credentials Before Delivering Genuine Installer CodeAudit AI VS Code Extension Captures Developer Source Code in the Background Ledger Supply Chain Attack Hits Europe via Tampered Wallets The post CL-STA-0954 Deploys PEERSTITCH Malware on FortiGate Firewalls After FortiManager Breach appeared first on Daily