vpn exploits

Gunra ransomware affiliates are exploiting Fortinet VPN vulnerabilities to bypass MFA, steal enterprise data, move laterally, and deploy double-extortion ransomware.

Threat actors are exploiting a now-patched vulnerability in Veeam Backup & Replication (CVE-2024-40711) to deploy Akira and Fog ransomware. Using compromised VPN credentials, attackers create local accounts and spread ransomware, targeting enterprise backup systems. The flaw, rated 9.8 on the CVSS scale, enables remote code execution and was patched in September 2024.