Sweeping Credential-Harvesting Heist Compromises +30K Fortinet Devices

A series of high-impact incidents reported by DarkReading shows a widespread credential-harvesting campaign that has compromised >30,000 Fortinet devices across ~200 countries and produced a large corpus of working credentials. Multiple active threats and rapid exploitations are highlighted: fileless “Phantom” stealer targeting browser credentials; a SprySOCKS Windows variant abusing kernel drivers; the Rokarolla Android trojan achieving full device control and persistence; supply-chain worms (Miasma, IronWorm, Hades) targeting developer ecosystems; and high-profile vulnerability exploitation,