Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer

Threat actors are continuing to exploit a critical nowpatched security flaw impacting FortiClient Endpoint Management Server EMS deployments to deliver a credentialstealing malware family dubbed EKZ Infostealer The campaign abused trusted endpoint management infrastructure to deliver malware across managed endpoints Arctic Wolf said Threat actors disguised the credential stealer