China-linked Hackers Targeting Unpatched SonicWall SMA Devices with Malware

A suspecting China-linked hacking campaign has been observed targeting unpatched SonicWall Secure Mobile Access (SMA) 100 appliances to drop malware and establish long-term persistence.
"The malware has functionality to steal user credentials, provide shell access, and persist through firmware upgrades," cybersecurity company Mandiant said in a technical report published this week.
The

access campaign china credentials cybersecurity cybersecurity company devices firmware hackers hacking hacking campaign malware mandiant mobile persistence report shell sma sonicwall sonicwall secure mobile access sonicwall sma steal targeting technical unpatched