[Intel]: https://www.mandiant.com/resources/blog/chinese-actors-exploit-fortios-flaw

[timb-machine]

Area

Malware reports

Parent threat

Initial Access

Finding

https://www.mandiant.com/resources/blog/chinese-actors-exploit-fortios-flaw

Industry reference

attack:T1480:Execution Guardrails
attack:T1562.006:Indicator Blocking
uses:Non-persistentStorage

Malware reference

BOLDMOVE
wltm

Actor reference

No response

Component

Linux

Scenario

Collaboration across enterprise boundaries