A cybercriminal group has stolen credentials contained in configuration files of nearly 74,000 Fortinet firewalls and VPN gateways.