Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant

Unit 42 has uncovered PEERSTITCH, a novel memory-resident malware deployed in an intrusion that began with exploitation of a FortiManager flaw (CVE-2024-47575) against a telecommunications organization. The attackers exfiltrated configurations, cryptographic material and database files covering more than 500 managed FortiGate firewalls, then used a second FortiOS flaw to deploy the implant.