Record · corpus.blog/posts/01a0875f-7594-724c-8989-1b8f5d8a9c4c

Fake copies of Belsen Group's FortiGate config leaks install malware

chris.partridge.tech · published 19 January 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at chris.partridge.tech Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 14
Words captured: 862

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://www.bleepingcomputer.com/news/security/hackers-leak-configs-and-vpn-credentials-for-15-000-fortigate-devices/

bleepingcomputer.com

http://belsenacdodoy3nsmmyjfmtgjen6ipaqkti7dm2q57vabjx2vzq6tnad.onion/

belsenacdodoy3nsmmyjfmtgjen6ipaqkti7dm2q57vabjx2vzq6tnad.onion

https://cyberplace.social/@GossiTheDog/113834848200229959

cyberplace.social

https://www.virustotal.com/gui/file/04fc389b32e1a1629be7eebcf03db3adc08be69663a45ccbe0249a57c2cceb96

virustotal.com

https://malshare.com/sample.php?action=detail&hash=04fc389b32e1a1629be7eebcf03db3adc08be69663a45ccbe0249a57c2cceb96

malshare.com

https at www.lua.org

lua.org

https://www.virustotal.com/gui/file/d92b9e01e24935e1cc6144734c0b39379edef1e3c06aedbd547dc304e7334d77/community

virustotal.com

https://malshare.com/sample.php?action=detail&hash=d92b9e01e24935e1cc6144734c0b39379edef1e3c06aedbd547dc304e7334d77

malshare.com

https://any.run/report/04fc389b32e1a1629be7eebcf03db3adc08be69663a45ccbe0249a57c2cceb96/5e22c77f-bd6e-4d8d-9832-e0e2eec7094a

any.run

https://malpedia.caad.fkie.fraunhofer.de/details/win.smartloader

malpedia.caad.fkie.fraunhofer.de

https://bazaar.abuse.ch/browse/signature/SmartLoader/

bazaar.abuse.ch

https://research.openanalysis.net/github/lua/2024/03/03/lua-malware.html

research.openanalysis.net

https://www.malware-traffic-analysis.net/2024/10/03/index.html

malware-traffic-analysis.net

https://www.reddit.com/r/fortinet/comments/1i20c2k/belsen_group_config_and_vpn_password_leak/

reddit.com

Elsewhere on chris.partridge.tech (10)

A mirror of the Belsen Group FortiGate configs leak | tweedge's blog Read at the source ↗

chris.partridge.tech

https://chris.partridge.tech/2025/fake-fortigate-leaks-peddling-malware/lure-full.png

chris.partridge.tech

https://chris.partridge.tech/2025/fake-fortigate-leaks-peddling-malware/malware-repo-full.png

chris.partridge.tech

https://chris.partridge.tech/2025/fake-fortigate-leaks-peddling-malware/AKboss1221-profile.png

chris.partridge.tech

https://chris.partridge.tech/2025/fake-fortigate-leaks-peddling-malware/rokytd-profile.png

chris.partridge.tech

https://chris.partridge.tech/2025/fake-fortigate-leaks-peddling-malware/network-activity.pcap

chris.partridge.tech

So, someone tried baiting people into downloading malware on r/cybersecurity Read at the source ↗

chris.partridge.tech

https://chris.partridge.tech/2025/fake-fortigate-leaks-peddling-malware/ips.txt

chris.partridge.tech

50 Domains Worth Blocking: The Evolution of ViperSoftX's Underreported DGA Read at the source ↗

chris.partridge.tech

Index | tweedge's blog Read at the source ↗

chris.partridge.tech