Thai Broadband Provider Targeted via FortiGate SSL-VPN and MeshCentral Persistence

Reported 14 Sep 2026 by otx · Severity: medium

An exposed directory on a Thai server revealed an active intrusion campaign targeting 3BB (Triple T Broadband), one of Thailand's largest broadband providers. The attacker exploited CVE-2024-21762 in a FortiGate 60F SSL-VPN appliance to gain initial access, then deployed MeshCent