A joint FBI and USSS advisory says the FortiBleed credential campaign is still scanning FortiGate VPNs with stolen logins, and some victims are being locked out when attackers delete or change the original admin accounts. No CVE is involved.