Crims hijacking fully patched SonicWall VPNs to deploy stealthy backdoor and rootkit
Updated Unknown miscreants are exploiting fully patched, end-of-life SonicWall VPNs to deploy a previously unknown backdoor and rootkit, likely for data theft and extortion, according to Google's Threat Intelligence Group. In research published on Wednesday, the Chocolate Factory's intel analysts attribute the ongoing campaign to UNC6148 - UNC in Google's…
bubmagJuly 16, 2025