Dossier
FortiClient Endpoint Management Server
Coverage of FortiClient Endpoint Management Server in the Nexus archive.
- Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer
Threat actors are exploiting a patched security flaw in FortiClient Endpoint Management Server (EMS) to deploy credential-stealing malware. Arctic Wolf reported that the campaign used trusted endpoint management infrastructure to deliver malware across managed endpoints, disguising the payload as a Fortinet endpoint update.