The person at the center of this case
Companies and government entities worldwide
Cold Case · Open
6 years waiting · since 2020
EDGE DEVICE INTRUSIONS
Justice for Companies and government entities worldwide — the trail went cold in 2020, but the truth hasn't.
Start here
Key leads to think about
🔍
evidence
Lead #1What is the specific nature of the CVE-2020-12271 vulnerability and which firewall models were primarily targeted?
🎯
suspect
Lead #2Which Advanced Persistent Threat group is responsible, and what are their known tactics, techniques, and procedures?
💡
clue
Lead #3What sensitive data was successfully exfiltrated and from which high-value targets?
On April 22, 2020, an Advanced Persistent Threat group deployed malware exploiting vulnerability CVE-2020-12271 to compromise edge devices and computer networks at companies and government entities worldwide, exfiltrating sensitive data from firewalls. The FBI is seeking to identify the individuals responsible for this ongoing series of cyber intrusions that began in April 2020 and continues to the present. Public assistance is critical in identifying the threat actors behind these sophisticated, indiscriminate attacks targeting critical infrastructure.
Case
#288
Global
Federal Bureau of Investigation (FBI) - Indianapolis Field Office
Try asking
Claim this imported case
A one-time $10 claim transfers this imported case workspace to your account. You get 10 uploads for this case, 25 daily AI questions for this case, and public tips with files route to you.
10 uploads25 AI questions/day
This does not start a subscription. When the included limits are reached, the Personal plan unlocks more workspace capacity.
More leads to consider
Beyond the top three above — each detail below could be the thread that pulls this case open.
⏰
timeline
Lead #4How many organizations were compromised between April 2020 and the present, and what is the current threat status?
📞
contact
Lead #5Have any individuals or organizations reported suspicious network activity or data breaches related to this vulnerability?
Have information about any of these leads?
Even the smallest detail could be the key to solving this case.
Official wording
Source Narrative
Cyber Intrusions into Companies and Government Entities April 2020 to Present The Federal Bureau of Investigation (FBI) is asking the public for assistance in an investigation involving the compromise of edge devices and computer networks belonging to companies and government entities. As described by Sophos Ltd.
in a recently released cyber security report, on April 22, 2020, an Advanced Persistent Threat group allegedly created and deployed malware exploiting the vulnerability CVE-2020-12271 as part of a widespread series of indiscriminate computer intrusions designed to exfiltrate sensitive data from firewalls worldwide. The FBI is seeking information regarding the identities of the individuals responsible for these cyber intrusions.
Timeline of Events
📋
2020-04-22
Malware deployment begins
Advanced Persistent Threat group deploys malware exploiting CVE-2020-12271 vulnerability targeting edge devices and firewalls worldwide
Case Information
Incident:April 22, 2020
Last Updated:October 21, 2026
Leave a comment
Comments
Case Information
Incident:April 22, 2020
Last Updated:October 21, 2026