Source: thehackernews.com – Author: .
A threat activity cluster has been observed targeting fully-patched end-of-life SonicWall Secure Mobile Access (SMA) 100 series appliances as part of a campaign designed to drop a backdoor called OVERSTEP.
The malicious activity, dating back to at least October 2024, has been attributed by the Google Threat Intelligence Group (GTIG) to a hacking crew it tracks as UNC6148. The number of known
Original Post url: https://thehackernews.com/2025/07/unc6148-backdoors-fully-patched.html
Category & Tags: –
Views: 3
