Scam of the weekOtherPretends to be: Fortinet1 Nov 2026
Fake 'critical security update' for Fortinet products
Scammers may send fake emails or calls about the critical Fortinet vulnerability, trying to get your passwords or remote access.
What it looks like
You get an email or phone call saying your device or network is at risk because of a critical vulnerability. They say you must act now to install a security update. They may ask you to click a link, open an attachment, or give them remote access to your computer.
Subject: Urgent: Critical security update required for your Fortinet device. Dear [Your Name], Our records show you have a Fortinet product affected by a critical vulnerability. Click here to download the security update immediately: [https://example.com/fake-update]. If you don't act, your data may be at risk. - [Tech Support Team]
How to spot it
- You get an unsolicited message about a security update, especially urging immediate action.
- The sender's email address is not from the real company (e.g., uses a free email or misspelled domain).
- They ask for your password, bank details, or remote access to your computer.
- The message creates a sense of urgency or fear.
- The link or attachment looks suspicious (hover over it to see the real address).
What to do
- Do not click any links or open attachments.
- Do not give anyone remote access to your computer.
- If you think the update is real, go directly to the official website or contact the company using a number you know is real.
- Delete the message.
- If you have already given access, contact your bank and change your passwords.
Who to report it to
- Scamwatch (scamwatch.gov.au)
- ReportCyber (cyber.gov.au/report)
- Your bank if you shared financial information
- The real company (Fortinet) if you are unsure
Warn your family and friends