INC Ransomware Exploits SonicWall SMA 1000 Zero-Days in Widespread Attacks
INC Ransomware has emerged as the dominant threat actor exploiting recently disclosed vulnerabilities in SonicWall Secure Mobile Access (SMA) 1000 series VPN…
Tag: KNUCKLEBALL
UTA0533: Threat Cluster Behind Pre-Disclosure Exploitation of SonicWall Flaws
UTA0533 is a threat cluster tracked by Volexity that exploited SonicWall SMA 1000 vulnerabilities starting June 22, 2026, before patches were available.…
KNUCKLEBALL: Python Script Used in SonicWall Exploitation
KNUCKLEBALL is a Python script deployed by threat actors to launch Suo5, an open-source HTTP proxy, and a Behinder-like web shell named…
SonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root Access
A previously undocumented threat actor, tracked as UTA0533 by Volexity, exploited two zero-day vulnerabilities in SonicWall Secure Mobile Access (SMA) 1000 series…