CVE-2025-25249 Exploitation Delivers PivotC2, a FortiGate Post-Exploitation RAT

Russian-speaking cybercriminals are actively exploiting CVE-2025-25249 in FortiGate devices to deploy the AI-assisted PivotC2 RAT, enabling automated credential theft, network tunneling, and persistent access across at least 178 victims—primarily in the US—with confirmed data exfiltration and ongoing risk to unpatched systems.