SonicWall SSL VPN Accounts in Attacker Crosshairs

[rbc]

In the wake of the recent compromise of SonicWall firewall configuration files, Huntress warns of a widespread campaign targeting SonicWall SSL VPN accounts across multiple businesses.

The attackers, the cybersecurity outfit says, are rapidly logging into multiple SSL VPN accounts across compromised devices, likely using valid credentials rather than brute-forcing them.

Most of the activity occurred on October 4, and continued in clusters over the following days. By October 10, more than 100 SonicWall SSL VPN accounts across 16 environments were compromised as part of the campaign.
[...]
SonicWall SSL VPN Accounts in Attacker Crosshairs