The person at the center of this case
Companies and Government Entities (Edge Devices and Networks)
Cold Case · Open
6 years waiting · since 2020
EDGE DEVICE INTRUSIONS
Justice for Companies and Government Entities (Edge Devices and Networks) — the trail went cold in 2020, but the truth hasn't.
Start here
Key leads to think about
🔍
evidence
Lead #1What is the specific nature of the sensitive data exfiltrated from compromised firewalls and which sectors were most heavily targeted?
🎯
suspect
Lead #2Which Advanced Persistent Threat group is responsible, and what are their known tactics, techniques, and procedures?
💡
clue
Lead #3How was the CVE-2020-12271 vulnerability initially discovered and exploited, and were there earlier indicators of compromise?
On April 22, 2020, an Advanced Persistent Threat group deployed malware exploiting CVE-2020-12271 to compromise edge devices and networks at companies and government entities worldwide, exfiltrating sensitive data from firewalls. The FBI continues to seek the identities of individuals responsible for this ongoing series of indiscriminate cyber intrusions. Public assistance is critical to identifying the threat actors behind these attacks that have persisted since 2020.
Case
#288
Worldwide
Federal Bureau of Investigation (FBI) - Indianapolis Field Office
Try asking
Claim this imported case
A one-time $10 claim transfers this imported case workspace to your account. You get 10 uploads for this case, 25 daily AI questions for this case, and public tips with files route to you.
10 uploads25 AI questions/day
This does not start a subscription. When the included limits are reached, the Personal plan unlocks more workspace capacity.
More leads to consider
Beyond the top three above — each detail below could be the thread that pulls this case open.
📞
contact
Lead #4Have any victims come forward with information about the intrusions, and what technical indicators can help identify compromised systems?
Have information about any of these leads?
Even the smallest detail could be the key to solving this case.
Official wording
Source Narrative
Cyber Intrusions into Companies and Government Entities April 2020 to Present The Federal Bureau of Investigation (FBI) is asking the public for assistance in an investigation involving the compromise of edge devices and computer networks belonging to companies and government entities. As described by Sophos Ltd.
in a recently released cyber security report, on April 22, 2020, an Advanced Persistent Threat group allegedly created and deployed malware exploiting the vulnerability CVE-2020-12271 as part of a widespread series of indiscriminate computer intrusions designed to exfiltrate sensitive data from firewalls worldwide. The FBI is seeking information regarding the identities of the individuals responsible for these cyber intrusions.
Timeline of Events
📋
2020-04-22
Malware Deployment
Advanced Persistent Threat group created and deployed malware exploiting CVE-2020-12271 vulnerability targeting firewalls worldwide to exfiltrate sensitive data
Case Information
Incident:April 22, 2020
Last Updated:September 11, 2026
Leave a comment
Comments
Case Information
Incident:April 22, 2020
Last Updated:September 11, 2026