Vulnerabilities in SonicWall SMA1000 Devices Exploited to Deploy Custom Malware

Two recently identified security flaws in SonicWall SMA1000 VPN appliances were the target of zero-day attacks over a period of several weeks.…

IT teams should prioritize identifying and auditing all SonicWall SMA1000 devices in their infrastructure, urgently apply available security patches, and inspect access logs and running processes to detect custom malware. Additionally, VPN connection logs should be reviewed to identify suspicious access during the exploitation period.