UTA0533 is a threat cluster tracked by Volexity that exploited SonicWall SMA 1000 vulnerabilities starting June 22, 2026, before patches were available. The group deployed KNUCKLEBALL, Suo5, and ORANGETAIL to maintain access and move laterally.
UTA0533 is a threat cluster tracked by Volexity that exploited SonicWall SMA 1000 vulnerabilities starting June 22, 2026, before patches were available. The group deployed KNUCKLEBALL, Suo5, and ORANGETAIL to maintain access and move laterally.