Skip to content
NewA calmer, faster ZeroHour
Ransomwarecritical

UNC6148 deploys Overstep malware on SonicWall devices, possibly for ransomware operations

Security Affairsby @securityaffairs ()4 min read2 · 1 read
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2024-38475
Improper Output Escaping in Apache HTTP Server mod_rewrite Enables File Disclosure/Code Execution
9.1100%KEV
KEV

From the original article

4 min read at securityaffairs.com

UNC6148 targets SonicWall devices with Overstep malware, using a backdoor and rootkit for data theft, extortion, or ransomware. Google’s Threat Intelligence Group warns that a threat actor tracked as UNC6148 has been targeting SonicWall SMA appliances with new malware dubbed Overstep.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.