SonicWall SMA appliance infected by a custom malware allegedly developed by Chinese hackers

Alleged China-linked threat actors infected unpatched SonicWall Secure Mobile Access (SMA) appliances with a custom backdoor. Mandiant researchers reported that alleged China-linked threat actors, tracked as UNC4540, deployed custom malware on a SonicWall SMA appliance. The malware allows attackers to steal user credentials, achieve persistence through firmware upgrades, and provides shell access. The analysis of a […]

The post SonicWall SMA appliance infected by a custom malware allegedly developed by Chinese hackers appeared first on Security Affairs.

access analysis apt attackers backdoor breaking news china china-linked threat actors chinese chinese hackers credentials firmware hackers hacking information security news it information security malware mandiant mobile persistence pierluigi paganini researchers shell sma sonicwall sonicwall secure mobile access sonicwall sma steal threat threat actors unc4540 unpatched