A recent campaign has been identified by one of the domain expert company that is actively targeting publicly exposed management interfaces on Fortinet FortiGate firewall devices. This campaign involves unauthorized administrative logins, the creation of new administrative accounts, the establishment of SSL VPN connections, and various malicious configuration changes. While