SonicWall SSL VPN
Named by 3 kept items in this workspace.
Search every workspace for SonicWall SSL VPN. It matches the name as written, so it can find other things that share it.
The items that name it 3
Exposed VPN appliance used as the initial-access vector via credential spray and login with no MFA.
SonicWall SSLVPN devices previously compromised in related campaigns (October 2025, February 2026)
Compromised credentials used for initial access; account lacked MFA and portal access privileges from the attacker's location
All technologies in this workspace.