A menace exercise cluster has been noticed focusing on fully-patched end-of-life SonicWall Safe Cell Entry (SMA) 100 collection home equipment as a part of a marketing campaign designed to drop a backdoor known as OVERSTEP.
The malicious exercise, courting again to no less than October 2024, has been attributed by the Google Risk Intelligence Group (GTIG) to a gaggle it tracks as UNC6148. The variety of identified victims is
UNC6148 Backdoors Totally-Patched SonicWall SMA 100 Collection Units with OVERSTEP Rootkit
