As cited
Copy frozen at (site build).
threat intel
Active Reconnaissance Campaign Targets SonicWall Firewalls Through Commercial Proxy Infrastructure
GreyNoise detected over 84,000 scanning sessions targeting SonicWall SonicOS firewalls within four days, using coordinated rotating proxy infrastructure to conduct active reconnaissance. The campaign indicates organized threat actor activity probing SonicWall deployments at scale.
Why it matters: Organizations running SonicWall firewalls face immediate exposure from active reconnaissance that precedes exploitation or breach attempts; practitioners should review firewall logs, restrict SonicOS admin interfaces, and monitor for follow-on attack activity.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
Active Reconnaissance Campaign Targets SonicWall Firewalls Through Commercial Proxy Infrastructure
GreyNoise detected over 84,000 scanning sessions targeting SonicWall SonicOS firewalls within four days, using coordinated rotating proxy infrastructure to conduct active reconnaissance. The campaign indicates organized threat actor activity probing SonicWall deployments at scale.
Why it matters: Organizations running SonicWall firewalls face immediate exposure from active reconnaissance that precedes exploitation or breach attempts; practitioners should review firewall logs, restrict SonicOS admin interfaces, and monitor for follow-on attack activity.
- Source published
- First seen by Cybersecurity Tracker