Apparently, the threat actors were already aware of this vulnerability two months prior to Fortinet disclosing the vulnerability.
During this so-called zero-day period, the actor infected 14,000 devices alone.
This gave the state actor permanent access to the systems.
It is currently unknown how many victims have actually installed the malware.
We will not allow any country or individual using Chinese infrastructure to engage in such illegal activities.
source: www.techworm.net