Threat actors exploited vulnerabilities in SonicWall Gen6 SSL-VPN appliances by brute-forcing VPN credentials and circumventing multi-factor authentication (MFA) to deploy ransomware attack tools.
Ensure that your organization's VPN systems, particularly those using SonicWall Gen6 SSL-VPN appliances, are updated and patched to address known vulnerabilities. Additionally, consider implementing more robust MFA solutions and continuous monitoring to detect and respond to brute-force attempts, as threat actors are actively targeting these systems to deploy ransomware.