{"id":77187,"date":"2025-05-28T11:25:29","date_gmt":"2025-05-28T08:25:29","guid":{"rendered":"https:\/\/gulftech-news.com\/en\/?p=77187"},"modified":"2025-05-28T11:25:31","modified_gmt":"2025-05-28T08:25:31","slug":"fortinet-warns-of-ai-powered-attacks-as-automated-scans-hit-36000-per-second","status":"publish","type":"post","link":"https:\/\/gulftech-news.com\/en\/2025\/05\/28\/fortinet-warns-of-ai-powered-attacks-as-automated-scans-hit-36000-per-second\/","title":{"rendered":"Fortinet Warns of AI-Powered Attacks as Automated Scans Hit 36,000 Per Second"},"content":{"rendered":"\n

500% Spike in Data Leaks as Infostealer Malware Floods Underground Forums<\/em><\/strong><\/p>\n\n\n\n

Global report highlights rising risks for enterprises as cybercriminals scale attacks using generative AI and underground tools<\/strong><\/em><\/p>\n\n\n\n

Fortinet\u00ae<\/a> (NASDAQ: FTNT), the global cybersecurity leader driving the convergence of networking and security, has released its 2025 Global Threat Landscape Report<\/a>, revealing a dramatic surge in cyber threats across 2024 driven by the rapid adoption of artificial intelligence, automation, and commoditized hacking tools. According to the report, these developments have significantly eroded the effectiveness of traditional security defenses and accelerated the pace and scale of attacks.<\/p>\n\n\n\n

Compiled by FortiGuard Labs, the report outlines a sharp 16.7% year-over-year increase in automated scanning activity, with a staggering 36,000 scans per second recorded globally. attackers are increasingly \u201cshifting left,\u201d targeting vulnerable digital assets earlier in the attack lifecycle, particularly protocols such as SIP(Session Initiation Protocol), RDP (Remote Desktop Protocol), and operational technologies (OT) and Internet of Things (IoT) systems like Modbus TCP.<\/p>\n\n\n\n

Cybercrime Marketplace Expands with Record Vulnerabilities<\/strong><\/p>\n\n\n\n

The dark web has evolved into a mature ecosystem for exploit kits and corporate access data. In 2024, more than 40,000 new vulnerabilities were added to the U.S. National Vulnerability Database, a 39% rise from 2023. Threat actors capitalized on this surge by selling initial access packages, often bundled with enterprise credentials (20%), RDP access (19%), admin panels (13%), and malicious web shells (12%).<\/p>\n\n\n\n

Infostealers Drive Record Credential Leaks<\/strong><\/p>\n\n\n\n

One of the most alarming trends identified in the report is the exponential growth of data leaks through infostealer malware. FortiGuard Labs noted a 500% increase in available logs from compromised systems, with over 1.7 billion stolen credentials circulating on underground forums in 2024 alone. This flood of stolen data has led to a sharp increase in targeted cyberattacks against businesses and individuals.<\/p>\n\n\n\n

AI-Powered Phishing, Sectoral Targeting Rise<\/strong><\/p>\n\n\n\n

Fortinet also flagged the increasing use of generative AI tools\u2014such as FraudGPT, BlackmailerV3, and ElevenLabs\u2014by cybercriminals to craft sophisticated phishing campaigns and evade traditional detection mechanisms. These tools are enabling attackers to create highly convincing content at scale, significantly raising the threat level.<\/p>\n\n\n\n

Meanwhile, manufacturing emerged as the most targeted sector (17%), followed by business services (11%), construction (9%), and retail (9%). Attackers used tailored exploitation strategies\u2014often backed by nation-state actors or Ransomware-as-a-Service (RaaS) groups\u2014to maximize impact. Geographically, the United States faced 61% of all documented attacks, far surpassing the UK (6%) and Canada (5%).<\/p>\n\n\n\n

Cloud and Identity Risks Remain Critical<\/strong><\/p>\n\n\n\n

The report highlights ongoing vulnerabilities in cloud environments, driven by exposed storage, misconfigured services, and over-permissioned identities. In 70% of the cloud incidents analyzed, threat actors gained access through anomalous login locations, underscoring the need for advanced identity monitoring and adaptive access controls.<\/p>\n\n\n\n

In a disturbing development, over 100 billion compromised records were shared across darknet forums in 2024\u2014a 42% increase over the previous year. This surge was largely powered by \u201ccombo lists,\u201d which bundle stolen usernames, passwords, and emails for use in automated credential-stuffing attacks. Cybercrime groups such as BestCombo, BloddyMery, and ValidMail were among the most prolific actors.<\/p>\n\n\n\n

Call for a Strategic Shift in Cyber Defense<\/strong><\/p>\n\n\n\n

\u201cOur 2025 Global Threat Landscape Report makes it clear: cybercriminals are scaling faster than ever, using AI and automation to gain the upper hand,\u201d said Derek Manky, Chief Security Strategist and Global Vice President of Threat Intelligence at FortiGuard Labs. \u201cDefenders must abandon outdated security playbooks and transition to proactive, intelligence-driven strategies that incorporate AI, zero trust architectures, and continuous threat exposure management.\u201d<\/p>\n\n\n\n

Actionable Guidance for CISOs<\/strong><\/p>\n\n\n\n

Fortinet\u2019s report features a \u201cCISO Playbook for Adversary Defense, offering strategic recommendations for IT leaders, including:

<\/p>\n\n\n\n