OTX Threat: Thai Broadband Provider Targeted via FortiGate SSL-VPN and MeshCentral Persistence

An exposed directory on a Thai server revealed an active intrusion campaign targeting 3BB (Triple T Broadband), one of Thailand's largest broadband providers. The attacker exploited CVE-2024-21762 in a FortiGate 60F SSL-VPN appliance to gain initial access, then deployed MeshCentral remote management software for persistent command-and-control. The operation involved extensive reconnaissance, cred CVEs: CVE-2024-21762 Sectors: Telecommunications