Fake Fortinet Sites Steal VPN Credentials Using AI Search Summaries

Beware of fake Fortinet VPN sites that steal credentials using AI-manipulated search results. Protect your data now!

Jan 10, 2026

ON THIS PAGE

Want more insights like this?

Subscribe to our newsletter to get the latest software protection strategies delivered to your inbox.

By submitting your email, you consent to Codekeeper contacting you and agree to our privacy policy.

Cybercriminals are running a sophisticated phishing campaign that tricks people searching for Fortinet VPN downloads. The attackers created fake sites that look identical to Fortinet's official portal and manipulated AI-powered search summaries to promote their malicious links.

The scam works by hosting initial content on GitHub to appear trustworthy, then redirecting users from search engines to fake Fortinet sites. These sites demand VPN credentials before allowing downloads, stealing login information while providing legitimate software to avoid suspicion.

Security researchers warn this represents a new threat where AI search tools inadvertently promote malicious content. IT teams should block domains like vpn-fortinet[.]github[.]io and fortinet-vpn[.]com, while reminding staff that real software downloads don't require credentials upfront.

Source: Cybersecurity News

Have questions about protecting your software?

Our escrow experts are standing by to help.

Book a free demo