{"schema_version":"0.10.0","id":"LR-2026-0312","record_version":1,"title":"AI-augmented threat actor compromises 600+ FortiGate devices in 55 countries","verification":{"human_verified":false,"method":"automated_gate","auto_verified":true,"score":61.0,"score_breakdown":{"source_authority":16.5,"independent_corroboration":15.0,"implicated_party_confirmed":0.0,"citation_integrity":14.0,"specificity":3.0,"completeness":4.48,"unhedged_language":5.0},"checks":{"schema_valid":true,"every_field_cited":true,"quotes_verbatim":true,"source_fetched":true,"distinct_incident":true,"dates_plausible":true,"sources_agree":true,"source_describes_incident":true,"severe_backed_by_source":true,"record_integrity":true,"eligible":true,"about_this_case":true},"gate_version":"gate-2026-10-18.7","cross_check_model":null,"cross_check_agreement":null,"duplicate_of":null,"verified_by":null,"verified_at":"2026-11-01","extraction_run_id":null,"evidence_level":{"level":"confirmed","reason":"Amazon Web Services research","original_document":{"url":"https://aws.amazon.com/blogs/security/ai-augmented-threat-actor-accesses-fortigate-devices-at-scale/","organisation":"Amazon Web Services","role":"researcher"},"reports_total":2,"reports_independent":2,"reports_derivative":0,"developing":false,"disputed":false,"rules_version":"evidence-2026-10-29.1","computed_at":"2026-11-01","history":[{"date":"2026-11-01","from_level":null,"to_level":"confirmed","reason":"Amazon Web Services research"}]},"sources_hash":"7f2f579a1a47abc6e5452c7875be9a3a907667ab67f8e80504536d38de003bd0"},"system":{"model_name":null,"model_version":null,"developer":"unknown","harness":null,"tools_granted":[],"permissions_scope":null,"autonomy_level":"unknown","guardrails_present":[],"deployment_context":"unknown","tier":null,"lifecycle_stage":null,"integration_type":null,"intended_use":null,"safeguard_state":null,"production_intended":null},"event":{"date_occurred":"2026-01-11","date_disclosed":"2026-02-20","incident_class":"security_compromise","failure_class":null,"agent_involved":null,"secondary_failure_classes":[],"trigger":"unknown","duration":null,"detection_method":"unknown","summary":"A financially motivated threat actor used multiple commercial generative AI services to compromise FortiGate devices that Amazon Threat Intelligence observed between January 11 and February 18, 2026. The actor reached over 600 devices in more than 55 countries by exploiting exposed management ports and weak single-factor credentials rather than vulnerabilities. With stolen configuration files, the actor tried to enter victim networks, compromise Active Directory, extract credential databases and reach backup infrastructure. When it met hardened environments it moved on to softer targets. Amazon Threat Intelligence identified the campaign through routine threat intelligence work and shared indicators with partners, and it reports that its response reduced the actor's operational effectiveness.","tags":[],"date_detected":null,"near_miss":null,"root_cause":null,"root_cause_detail":"exposed management ports and weak credentials with single-factor authentication","failure_class_detail":null,"responsible_party":null,"adversarial_actor":"external_attacker","input_provenance":null,"time_to_contain":null,"operations_paused":null,"remediation":null,"precursor_events":null,"primary_risk":"RK07","secondary_risks":["RK03"],"control_chain":[{"layer":"L4","party":"target","party_name":null,"control_id":"J2","outcome":"missing","reason":null,"quote":"No exploitation of FortiGate vulnerabilities was observed—instead, this campaign succeeded by exploiting exposed management ports and weak credentials with single-factor authentication, fundamental security gaps that AI helped an unsophisticated actor exploit at scale.","source_index":0,"reviewed":false},{"layer":"L4","party":"target","party_name":null,"control_id":"J1","outcome":"held","reason":null,"quote":"Another noteworthy finding is the threat actor's pattern of repeatedly running into failures when trying to exploit anything beyond the \"most straightforward, automated attack paths,\" with their own documentation recording that the targets had either patched the services, closed the required ports, or had no vulnerable exploitation vectors.","source_index":1,"reviewed":false}],"remediations":[{"by":null,"kind":"advice","date_reported":null,"controls_added":["J2"],"quote":"Implement multi-factor authentication for all administrative and VPN access","source_index":0,"reviewed":false},{"by":null,"kind":"advice","date_reported":null,"controls_added":["J3"],"quote":"Isolating backup servers from general network access","source_index":0,"reviewed":false}]},"impact":{"direct_loss_usd":null,"remediation_hours":null,"records_exposed":null,"third_parties_affected_count":null,"severity":"major","severity_because":"Test: many third parties, with a stated count of two or more affected parties. Over 600 FortiGate devices in 55 countries were compromised.","harm_class":["third_party_security"],"affected_description":null,"protected_class_involved":null,"data_categories_exposed":[],"loss_range_usd":null,"reversibility":null,"downstream_exposure_count":null},"evidence":{"sources":[{"url":"https://aws.amazon.com/blogs/security/ai-augmented-threat-actor-accesses-fortigate-devices-at-scale/","publisher":"Amazon Web Services","date":"2026-02-20","type":"vendor_research","title":"AI-augmented threat actor accesses FortiGate devices at scale | Amazon Web Services","archived_url":null,"attachment":"first_report","independence":"independent"},{"url":"https://thehackernews.com/2026/02/ai-assisted-threat-actor-compromises.html","publisher":"The Hacker News","date":"2026-02-21","type":"press","title":"AI-Assisted Threat Actor Compromises 600+ FortiGate Devices in 55 Countries","archived_url":null,"independence":"independent"}],"per_field_confidence":{"event.date_occurred":"C","event.incident_class":"C","event.root_cause_detail":"C","event.adversarial_actor":"C","impact.harm_class":"C","impact.severity":"D","impact.severity_because":"D","event.primary_risk":"D","event.secondary_risks":"D","event.control_chain":"C","event.remediations":"C","event.summary":"C","system.autonomy_level":"D","system.deployment_context":"D","event.trigger":"D","event.detection_method":"D","context.country":"D","system.developer":"D","event.date_disclosed":"D","context.denominator_available":"D"},"field_citations":{"event.date_occurred":[{"source_index":0,"quote":"A recent investigation illustrates this shift: Amazon Threat Intelligence observed a Russian-speaking financially motivated threat actor leveraging multiple commercial generative AI services to compromise over 600 FortiGate devices across more than 55 countries from January 11 to February 18, 2026."}],"event.incident_class":[{"source_index":0,"quote":"A recent investigation illustrates this shift: Amazon Threat Intelligence observed a Russian-speaking financially motivated threat actor leveraging multiple commercial generative AI services to compromise over 600 FortiGate devices across more than 55 countries from January 11 to February 18, 2026."}],"event.root_cause_detail":[{"source_index":0,"quote":"No exploitation of FortiGate vulnerabilities was observed—instead, this campaign succeeded by exploiting exposed management ports and weak credentials with single-factor authentication, fundamental security gaps that AI helped an unsophisticated actor exploit at scale."}],"event.adversarial_actor":[{"source_index":0,"quote":"The threat actor in this campaign is not known to be associated with any advanced persistent threat group with state-sponsored resources."}],"impact.harm_class":[{"source_index":0,"quote":"The threat actor compromised globally dispersed FortiGate appliances, extracting full device configurations that yielded credentials, network topology information, and device configuration information."}],"impact.severity":[{"source_index":1,"quote":"A Russian-speaking, financially motivated threat actor has been observed taking advantage of commercial generative artificial intelligence (AI) services to compromise over 600 FortiGate devices located in 55 countries."}],"impact.severity_because":[{"source_index":1,"quote":"A Russian-speaking, financially motivated threat actor has been observed taking advantage of commercial generative artificial intelligence (AI) services to compromise over 600 FortiGate devices located in 55 countries."}],"event.control_chain":[{"source_index":0,"quote":"No exploitation of FortiGate vulnerabilities was observed—instead, this campaign succeeded by exploiting exposed management ports and weak credentials with single-factor authentication, fundamental security gaps that AI helped an unsophisticated actor exploit at scale."},{"source_index":1,"quote":"Another noteworthy finding is the threat actor's pattern of repeatedly running into failures when trying to exploit anything beyond the \"most straightforward, automated attack paths,\" with their own documentation recording that the targets had either patched the services, closed the required ports, or had no vulnerable exploitation vectors."}],"event.remediations":[{"source_index":0,"quote":"Implement multi-factor authentication for all administrative and VPN access"},{"source_index":0,"quote":"Isolating backup servers from general network access"}],"event.summary":[{"source_index":0,"quote":"A recent investigation illustrates this shift: Amazon Threat Intelligence observed a Russian-speaking financially motivated threat actor leveraging multiple commercial generative AI services to compromise over 600 FortiGate devices across more than 55 countries from January 11 to February 18, 2026."},{"source_index":0,"quote":"No exploitation of FortiGate vulnerabilities was observed—instead, this campaign succeeded by exploiting exposed management ports and weak credentials with single-factor authentication, fundamental security gaps that AI helped an unsophisticated actor exploit at scale."},{"source_index":0,"quote":"Notably, when this actor encountered hardened environments or more sophisticated defensive measures, they simply moved on to softer targets rather than persisting, underscoring that their advantage lies in AI-augmented efficiency and scale, not in deeper technical skill."},{"source_index":0,"quote":"Through routine threat intelligence operations, Amazon Threat Intelligence identified infrastructure hosting malicious tooling associated with this campaign."},{"source_index":0,"quote":"Amazon helped reduce the threat actor’s operational effectiveness and enabled organizations across multiple countries to take steps to disrupt the efficacy of the campaign."}]},"notes_on_gaps":"Amazon's report does not name the AI services, and the developer and model of those services are not stated; the DeepSeek and Anthropic Claude names and the HexStrike AI detail come only from a separate press update citing another researcher and were not used as system fields. No autonomous agent behaviour is described by Amazon, so agent_involved, failure_class and trigger are left out; the press update's claim of a coding agent executing tools is unverified. The publication date is not stated in the source text, so date_disclosed is left out. date_occurred uses the start of the stated observation window, which is a judgement. No loss amounts, record counts, durations, or count of affected organisations are stated, so those fields are left out. Responsible party, country and industry are not stated and are left out. Controls J2 and J8 are judged missing or failed from the report's description of single-factor authentication and exposed management ports; the report does not use control names. Remediations listed are recommendations from the report, not changes reported as made by a party. [case created by the backfill: read by claude-haiku-5-5, backfill-2026-11-01.2, 2026-11-01; not yet reviewed] [2026-11-01: evidence level set: Confirmed (Amazon Web Services research)]"},"context":{"industry":null,"org_size_band":null,"country":"unknown","denominator_available":false,"denominator":null,"related_incident_ids":[],"systemic_exposure":null,"shared_model_id":null,"upstream_incident_id":null,"incident_evidence":null,"regulatory":null,"coverage":null},"narrative":{"steps":[{"step":"went_wrong","text":"The actor repeatedly failed against hardened or non-standard targets and moved on to softer ones.","quote":"Notably, when this actor encountered hardened environments or more sophisticated defensive measures, they simply moved on to softer targets rather than persisting, underscoring that their advantage lies in AI-augmented efficiency and scale, not in deeper technical skill.","source_index":0,"grade":"C"},{"step":"reached","text":"Stolen credentials were used to enter victim networks, compromise Active Directory and attempt access to backup infrastructure.","quote":"They then used these stolen credentials to connect to victim internal networks and conduct post-exploitation activities including Active Directory compromise, credential harvesting, and attempts to access backup infrastructure, consistent with pre-ransomware operations.","source_index":0,"grade":"C"},{"step":"caught","text":"Amazon found attacker infrastructure during routine threat intelligence operations.","quote":"Through routine threat intelligence operations, Amazon Threat Intelligence identified infrastructure hosting malicious tooling associated with this campaign.","source_index":0,"grade":"C"}],"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://aws.amazon.com/blogs/security/ai-augmented-threat-actor-accesses-fortigate-devices-at-scale/","https://thehackernews.com/2026/02/ai-assisted-threat-actor-compromises.html"]},"analysis":{"sections":{"timeline":[{"text":"Earlier exposure of the same server revealed it hosted a copy of the HexStrike AI offensive framework.","quote":"A prior exposure of the same server in December 2025 has revealed that the earlier instance hosted a copy of an offensive AI framework known as HexStrike AI.","source_index":1,"when":"2025-12"},{"text":"Observed activity window begins: campaign compromising FortiGate devices starts.","quote":"A recent investigation illustrates this shift: Amazon Threat Intelligence observed a Russian-speaking financially motivated threat actor leveraging multiple commercial generative AI services to compromise over 600 FortiGate devices across more than 55 countries from January 11 to February 18, 2026.","source_index":0,"when":"2026-01-11"},{"text":"Stolen credentials used to connect to victim networks for post-exploitation activity.","quote":"They then used these stolen credentials to connect to victim internal networks and conduct post-exploitation activities including Active Directory compromise, credential harvesting, and attempts to access backup infrastructure, consistent with pre-ransomware operations.","source_index":0,"when":null},{"text":"Amazon identified attacker infrastructure through routine threat intelligence operations.","quote":"Through routine threat intelligence operations, Amazon Threat Intelligence identified infrastructure hosting malicious tooling associated with this campaign.","source_index":0,"when":null},{"text":"Observed activity window ends.","quote":"That's according to new findings from Amazon Threat Intelligence, which said it observed the activity between January 11 and February 18, 2026.","source_index":1,"when":"2026-02-18"},{"text":"Press story updated with additional details from a separate research report.","quote":"(The story was updated after publication to include additional details of the campaign from Cyber and Ramen.)","source_index":1,"when":null}]},"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://aws.amazon.com/blogs/security/ai-augmented-threat-actor-accesses-fortigate-devices-at-scale/","https://thehackernews.com/2026/02/ai-assisted-threat-actor-compromises.html"]}}