As cited
Copy frozen at (site build).
threat intel
Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant
Unit 42 researchers discovered PEERSTITCH, a memory-resident ARM64 malware deployed through exploitation of CVE-2024-47575 against over 500 FortiGate firewalls. The implant operates stealthily within memory, leaving minimal traces on disk. Attackers leveraged the critical vulnerability to establish persistent access to network perimeters.
Why it matters: Firewall administrators must immediately patch CVE-2024-47575 (CVSS 9.8) on all FortiGate devices, as this active exploitation targets hundreds of organizations and delivers difficult-to-detect implants at critical infrastructure chokepoints.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant
Unit 42 researchers discovered PEERSTITCH, a memory-resident ARM64 malware deployed through exploitation of CVE-2024-47575 against over 500 FortiGate firewalls. The implant operates stealthily within memory, leaving minimal traces on disk. Attackers leveraged the critical vulnerability to establish persistent access to network perimeters.
Why it matters: Firewall administrators must immediately patch CVE-2024-47575 (CVSS 9.8) on all FortiGate devices, as this active exploitation targets hundreds of organizations and delivers difficult-to-detect implants at critical infrastructure chokepoints.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant
Unit 42 researchers discovered PEERSTITCH, a memory-resident ARM64 malware deployed through exploitation of CVE-2024-47575 against over 500 FortiGate firewalls. The implant operates stealthily within memory, leaving minimal traces on disk. Attackers leveraged the critical vulnerability to establish persistent access to network perimeters.
Why it matters: Firewall administrators must immediately patch CVE-2024-47575 (CVSS 9.8) on all FortiGate devices, as this active exploitation targets hundreds of organizations and delivers difficult-to-detect implants at critical infrastructure chokepoints.
- Source published
- First seen by Cybersecurity Tracker