LATAM Infrastructure Hit by Fortinet and Ivanti Exploits

CloudSEK uncovered "Operation Escaneo," a coordinated campaign that used public and adapted exploit code against Fortinet, Ivanti and other high‑risk vulnerabilities to breach Mexican and other Latin American government, transport, telecom and financial targets; attackers employed a custom scanner (Kimera), reverse tunnels (Chisel, Neo‑ReGeorg), GRE tunnels and compromised routers to maintain access and exfiltrated large volumes of sensitive data (including >1.3M personal records, AD maps, SSL keys and SAP hashes).