🧰 SonicWall VPN

The items that name it 5

• Credential Stuffing Campaign Hits SonicWall | Huntress SOC Tracking
  writeup2026-07-28

  SonicWall VPN and firewall remote access/management logins targeted by credential stuffing

• Plain Text Passwords: The Risks of Storing Them
  writeup2026-07-06

  Actively exploited for initial access, referenced from Huntress's related advisory 'Huntress Threat Advisory: Active Exploitation of SonicWall VPNs', which allowed initial access followed by Akira ransomware deployment.

• Exposed RDP: The Misconfiguration Attackers Keep Exploiting
  article2026-05-19

  Vulnerable VPN used as initial access point in a partner's network compromise

• Threat Actor Defense Evasion: How Attackers Disable AV & EDR
  writeup2026-05-18

  compromised credentials used as intrusion vector in February 2026 BYOVD attack

• ESXi Exploitation in the Wild
  writeup2026-01-07

  Assessed with high confidence as the initial access vector via compromise