Prolific ransomware group behind SonicWall zero-day attacks

By Matt Kapko

AI Summary

INC ransomware group has been chaining two SonicWall zero-day vulnerabilities in SMA1000 appliances to gain root access, move laterally, and exfiltrate and encrypt data for extortion. INC was not the first group to exploit these flaws but has been the most aggressive and effective in operationalizing the vulnerability chain. Organizations running SonicWall SMA1000 should apply patches immediately and audit for signs of lateral movement.

Read full article → https://cyberscoop.com/inc-ransomware-sonicwall-ze…

Relevance score: 86.0/100

# More from August 05

1
Massive ChainDrop npm supply-chain attack infects hundreds of packages BleepingComputer
2
Massive supply-chain attack compromises 440 packages under four hours CyberScoop
3
Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks The Hacker News
4
New Pass-ta-key attacks let malware hijack Google-synced passkeys BleepingComputer
6
CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises The Hacker News
7
Russian hackers hijack hotel Wi-Fi networks to spy on travelers, Microsoft says The Record
8
OpenAI, Anthropic AI agents targeted real people and systems in cyber tests BleepingComputer
9
US Water Cyberattacks Extend Beyond Minnesota to at Least 6 Other States SecurityWeek
10
TP-Link patches Omada ZTP flaws allowing hackers to breach networks BleepingComputer