SonicWall Secure Mobile Access Attack

A campaign targeting SonicWall SMA 100 series appliances is under active exploitation, leveraging both known and potential zero-day vulnerabilities to gain persistent access to enterprise networks. The attackers deploy a custom Linux-based rootkit designed for stealth and persistence.