Record · corpus.blog/posts/01a0ca8b-4baa-717b-85c5-e8538522a3d6

Attackers exploiting a patched FortiClient EMS vulnerability in the wild

Kaspersky Securelist · published 19 December 2024

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at securelist.com Wayback capture

1blogs citing

First cited: 15 Apr 2025
Most recent: 15 Apr 2025
Rank this month: not ranked
Links from this post: 52
Words captured: 1,928

Cited by

Blog

In the post

Date

Intel 471

Understanding and threat hunting for RMM software misuse Read at the source ↗

15 Apr 2025

Links from this post

Link

Host

https://www.fortiguard.com/psirt/FG-IR-24-007

fortiguard.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/12/18133014/Fortinet_01.png

media.kasperskycontenthub.com

https://nvd.nist.gov/vuln/detail/CVE-2023-48788

nvd.nist.gov

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/12/18133320/Fortinet_01_2.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/12/18133027/Fortinet_02.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/12/18133048/Fortinet_03.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/12/18133112/Fortinet_04.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/12/18133132/Fortinet_05.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/12/18133153/Fortinet_06.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/12/18133213/Fortinet_07.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/12/18133233/Fortinet_08.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/12/18133248/Fortinet_09.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/12/18133304/Fortinet_10.png

media.kasperskycontenthub.com

https://attack.mitre.org/techniques/T1190

attack.mitre.org

https://attack.mitre.org/techniques/T1078/002

attack.mitre.org

https://attack.mitre.org/techniques/T1562/001

attack.mitre.org

https://attack.mitre.org/techniques/T1059/001

attack.mitre.org

https://attack.mitre.org/techniques/T1021

attack.mitre.org

https://attack.mitre.org/techniques/T1105

attack.mitre.org

https://attack.mitre.org/techniques/T1570

attack.mitre.org

https://attack.mitre.org/techniques/T1555

attack.mitre.org

https://www.kaspersky.com/enterprise-security/managed-detection-and-response?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team___kmdr____ef11a3639315ce83

kaspersky.com

https://opentip.kaspersky.com/746710470586076bb0757e0b3875de9c90202be2/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______33c447193cfc434e&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/bc29888042d03fe0ffb57fc116585e992a4fdb9b/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______b12beef583adf901&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/73f8e5c17b49b9f2703fed59cc2be77239e904f7/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______278424cc8c390574&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/841fff3a36d82c14b044da26967eb2a8f61175a8/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______e22dc4f26dbb6a20&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/cf1ca6c7f818e72454c923fea7824a8f6930cb08/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______0a1a85c4dbc500a9&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/e3b6ea8c46fa831cec6f235a5cf48b38a4ae8d69/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______754fa411096be78c&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/75ebd5bab5e2707d4533579a34d983b65af5ec7f/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______f56e54b26d5f149a&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/44b83dd83d189f19e54700a288035be8aa7c8672/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______1bcd94aac2d066ef&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/8834f7ab3d4aa5fb14d851c7790e1a6812ea4ca8/results?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______d842096a52050bf8&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/45.141.84.45/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______705adf9a5a3f89d3&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/185.216.70.170/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______167a2146bf0daa16&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/hxxps%3A%2F%2Fsolarnyx2410150445.screenconnect.com%2FBin%2FScreenConnect.ClientSetup.exe%3Fe%3DAccess%26y%3DGuest/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______4304d1d00d744b30&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/hxxps%3A%2F%2Fallwebemails1.screenconnect.com%2FBin%2FScreenConnect.ClientSetup.exe%3Fe%3DAccess%26y%3DGuest/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______b8382d1f7c2bc62f&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/hxxps%3A%2F%2Fweb-r6hl0n.screenconnect.com%2FBin%2FScreenConnect.ClientSetup.exe%3Fe%3DAccess%26y%3DGuest/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______f62962489030af14&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/hxxp%3A%2F%2F185.196.9.31%3A8080%2Fbd7OZy3uMQL-YabI8FHeRw/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______8b27fe7cb7bcb2db&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/HXXP%3A%2F%2F148.251.53.222%3A14443%2FSETUP.MSI/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______c3ecc9d7b5d774dd&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/HXXP%3A%2F%2F185.216.70.170%2FOO.BAT/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______e4e13119c5aee669&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/HXXP%3A%2F%2F185.216.70.170%2FHELLO/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______8456ead5d67ee491&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/HXXP%3A%2F%2F185.216.70.170%2FA/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______9b74172798565fa1&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/hxxp%3A%2F%2F185.216.70.170/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______e687c00e34034793&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/hxxp%3A%2F%2F185.216.70.170%2Foo.bat/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______6a753c3c4a76a30e&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/hxxp%3A%2F%2F185.216.70.170%2Fhello/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______ba3e5117d6e7c856&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/hxxp%3A%2F%2F185.216.70.170%2Fsos.txt/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______86d402b5c9f68d5c&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/hxxp%3A%2F%2F185.216.70.170%2F72.bat/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______5a7b4c5cc42d079e&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/hxxp%3A%2F%2F206.206.77.33%3A8080%2FxeY_J7tYzjajqYj4MbtB0w/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______23fb6fa6a4167922&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/hxxp%3A%2F%2F5.61.59.201%3A8080%2FFlNOfGPkOL4qc_gYuWeEYQ%20%25TEMP%25%5CgfLQPbNLYYYh.exe/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______ba165080dbd44840&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/hxxp%3A%2F%2F5.61.59.201%3A8080%2F7k9XBvjahnQK09abSc8SpA%20%25TEMP%25%5CFaLNkAQGOe.exe/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______f95643e2a825d973&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/hxxp%3A%2F%2F5.61.59.201%3A8080%2F7k9XBvjahnQK09abSc8SpA%20%25TEMP%25%5CQgCNsJRB.exe/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______bfa0404eea2a20a5&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/hxxps%3A%2F%2Fwww.lidahtoto2.com%2Fassets%2Fim.ps1/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______043e1e6ce4cf1e41&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/hxxp%3A%2F%2F87.120.125.55%3A8080%2FBW_qY1OFZRv7iNiY_nOTFQ%20%25TEMP%25%5CEdgouRkWzLsK.exe/?icid=gl_securelist_acq_ona_smm__onl_b2b_securelist_lnk_sm-team_______59ebe6dae6c5ae50&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com