Thai Broadband Provider Hacked via Fortinet Vulnerability

Threat actors exploited known vulnerabilities in Fortinet and F5 network appliances to gain an initial foothold inside 3BB, a major Thai broadband provider. Once inside, attackers deployed a comprehensive toolkit for reconnaissance, credential harvesting, privilege escalation, and lateral movement — indicating a deliberate, multi-stage intrusion. The use of MeshCentral for persistence demonstrates that attackers planned for long-term access, not just opportunistic exploitation. This incident highlights the severe risk of leaving internet-facing network appliances unpatched, particularly when those devices serve as the gateway into an ISP's broader infrastructure. Unpatched edge devices in telecommunications environments can expose millions of downstream customers to risk.