FortiJump CVE-2024-47575: FGFM TCP 541 from external IP with rogue localhost dev

Arnold Chan@slaz

•updated 4 days ago•1•0•8

Detects inbound external connections on TCP port 541 (FGFM/FMG-Access protocol) correlated with the creation of .tm archives on the same device, or connections from known malicious IP addresses communicating over TCP 541.