Belsen_Group
Belsen_Group is a threat actor group, tracked by Brandefense. It exploits 1 known CVE.
- Techniques
- 0
- Exploited CVEs
- 1
- Record updated
About Belsen_Group.
The Belsen Group has exploited the CVE- vulnerability in Fortinet devices to compromise over 15,000 FortiGate firewalls, releasing detailed configurations and plaintext VPN credentials. Their leaked data, organized by country and IP address, primarily consists of configurations from FortiOS 7.0.6 and 7.2.1, which were the last vulnerable versions before patches were issued. Security researcher Kevin Beaumont confirmed that the group leveraged this vulnerability to gain unauthorized access and warned of potential exploitation of CVE- by similar threat actors. Fortinet has stated that the leaked data originates from older campaigns and not from any recent incidents.
Last updated Sep 12, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.