Advanced Threat Actor Exploits FortiOS Vulnerability to Deploy PEERSTITCH Malware

A suspected advanced threat actor exploited CVE-2025-61624, a path traversal vulnerability in FortiOS, to deploy PEERSTITCH, a memory-resident ARM64 malware. The malware bypasses checks on tagged VPN sessions, leveraging the flaw to evade detection.

A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH.

The attack involves the exploitation of CVE-2025-61624 (CVSS score: 5.4), a path traversal flaw in the command line interpreter of FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager that could allow a

Read original article