INC Ransomware Exploits SonicWall SMA 1000 Zero-Days in Widespread Attacks
INC Ransomware has emerged as the dominant threat actor exploiting recently disclosed vulnerabilities in SonicWall Secure Mobile Access (SMA) 1000 series VPN…
Tag: Suo5
UTA0533: Threat Cluster Behind Pre-Disclosure Exploitation of SonicWall Flaws
UTA0533 is a threat cluster tracked by Volexity that exploited SonicWall SMA 1000 vulnerabilities starting June 22, 2026, before patches were available.…
Suo5: Open-Source HTTP Proxy Used in Post-Exploitation
Suo5 is an open-source HTTP proxy tool used by attackers to establish covert communication channels after exploiting SonicWall SMA 1000 vulnerabilities. It…
SonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root Access
A previously undocumented threat actor, tracked as UTA0533 by Volexity, exploited two zero-day vulnerabilities in SonicWall Secure Mobile Access (SMA) 1000 series…