See relevant thread in r&#x2F;netsec: <a href="https:&#x2F;&#x2F;www.reddit.com&#x2F;r&#x2F;netsec&#x2F;comments&#x2F;40lotk&#x2F;ssh_backdoor_for_fortigate_os_version_4x_up_to&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.reddit.com&#x2F;r&#x2F;netsec&#x2F;comments&#x2F;40lotk&#x2F;ssh_backdoor...</a><p>&gt; It leaves no traces in any logs (wtf?). It keeps working even if you disable &quot;FMG-Access&quot;. It won&#x27;t let you define an admin user with the same name to mitigate it, so make sure that SSH access on your devices is at least restricted to trusted hosts!