Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-07-17 ⋅ Volexity ⋅ Sean Koessel, Steven Adair
Proxying to Compromise: SonicWall Secure Mobile Access 0-day Exploitation
Behinder UTA0533
2025-09-26 ⋅ Arctic Wolf ⋅ Arctic Wolf
Smash and Grab: Aggressive Akira Campaign Targets SonicWall VPNs, Deploys Ransomware in an Hour or Less
Akira Akira
2025-08-27 ⋅ eSentire ⋅ eSentire Threat Response Unit (TRU)
Threat Actors Deploy Sinobi Ransomware via Compromised SonicWall SSL VPN Credentials
Lynx Sinobi
2025-07-16 ⋅ Mandiant ⋅ Dimiter Andonov, Josh Goddard, Zander Work
Ongoing SonicWall Secure Mobile Access (SMA) Exploitation Campaign using the OVERSTEP Backdoor
UNC6148
2025-02-21 ⋅ SonicWall ⋅ SonicWall
Remcos RAT Targets Europe: New AMSI and ETW Evasion Tactics Uncovered
Remcos
2024-10-24 ⋅ Arctic Wolf ⋅ Akshay Suthar, Stefan Hostetler, Steven Campbell
Arctic Wolf Labs Observes Increased Fog and Akira Ransomware Activity Linked to SonicWall SSL VPN
Akira Akira
2024-08-27 ⋅ SonicWall ⋅ Security News
AutoIT Bot Targets Gmail Accounts First
2024-06-24 ⋅ SonicWall ⋅ SonicWall
StrelaStealer Resurgence: Tracking a JavaScript-Driven Credential Stealer Targeting Europe
StrelaStealer
2024-04-02 ⋅ SonicWall ⋅ SonicWall
Updated StrelaStealer Targeting European Countries
StrelaStealer
2024-01-29 ⋅ SonicWall ⋅ Security News
Blackwood APT Group Has a New DLL Loader
NSPX30 Blackwood
2023-03-08 ⋅ Mandiant ⋅ Ben Read, DANIEL LEE, Stephen Eckels
Suspected Chinese Campaign to Persist on SonicWall Devices, Highlights Importance of Monitoring Edge Devices
UNC4540
2023-02-23 ⋅ SonicWall ⋅ SonicWall
Berbew Backdoor Spotted In The Wild
Berbew
2022-06-21 ⋅ SonicWall ⋅ SonicWall
HTML Application Files are being used to distribute Smoke Loader Malware
SmokeLoader
2021-08-06 ⋅ SonicWall ⋅ SonicWall
Redosdru.v Malware that hides in encrypted DLL Files to avoid Detection by Firewalls
Redosdru
2021-07-17 ⋅ Bleeping Computer ⋅ Sergiu Gatlan
HelloKitty ransomware is targeting vulnerable SonicWall devices
HelloKitty
2021-06-08 ⋅ CrowdStrike ⋅ Hanno Heinrichs, Heather Smith
Another Brick in the Wall: eCrime Groups Leverage SonicWall VPN Vulnerability
2021-04-20 ⋅ FireEye ⋅ Alex Pennino, Chris DiGiamo, Josh Fleischer
Zero-Day Exploits in SonicWall Email Security Lead to Enterprise Compromise
2021-03-26 ⋅ SonicWall ⋅ SonicWall CaptureLabs Threats Research Team
China’s “Winnti” Spyder Module
Spyder
2021-02-01 ⋅ SonicWall ⋅ SonicWall
Urgent Security Notice: SonicWall Confirms SMA 100 Series 10. X Zero-Day Vulnerability
2021-01-31 ⋅ Twitter (@NCCGroupInfosec) ⋅ NCCGroup
Tweet on ITW exploitation of 0-day in SonicWall SMA 100 series