SonicWall has issued a firmware update for SMA 100 series devices to remove rootkit malware like OVERSTEP used in attacks by UNC6148 threat actors. The update aims to address vulnerabilities exploited by advanced malware, including ransomware-related incidents, emphasizing the importance of updating devices. #Overstep #UNC6148
Keypoints
- SonicWall released a firmware update to eliminate rootkit malware on SMA 100 devices.
- The OVERSTEP malware, used by threat actor UNC6148, facilitates persistent attacks and credential theft.
- Older firmware versions of SMA 100 series pose significant security risks and are recommended for upgrade.
- Recent attacks have involved deploying Abyss-related ransomware and web shells on affected devices.
- SonicWall advises users to apply security patches and reset credentials to prevent breaches.