FortiBleed actors monetize their access to Fortinet firewalls through cooperation with Inc and Lynx ransomware groups while also deploying zero-day exploits against Nextcloud.
China is deploying coordinated spear-phishing with Azureveil malware against targets in Czechia and Taiwan to systematically exfiltrate data from high-value organizations.