Ransomwarecritical
HelloKitty ransomware gang targets vulnerable SonicWall devices
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2019-7481 | Unauthenticated SQL Injection in SonicWall SMA100 Appliances | 7.5 | 100% | KEVRansomware | KEV |
| CVE-2021-20016 | Unauthenticated SQL Injection in SonicWall SMA100 SSL VPN | 9.8 | 40% | KEVRansomware | KEV |
From the original article
2 min read at securityaffairs.com
BleepingComputer became aware that the recent wave of attacks targeting vulnerable SonicWall devices was carried out by HelloKitty ransomware operators. SonicWall this week has issued an urgent security alert to warn companies of “an imminent ransomware campaing” targeting some of its equipment that reached end-of-life (EoL).
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.