SonicWall has released a security advisory to assist their customers with protecting systems impacted by the MySonicWall cloud backup file incident. SonicWall’s investigation found that a malicious actor performed a series of brute force techniques against their MySonicWall.com web portal to gain access to a subset of customer’s preference files stored in their cloud backup. While credentials within the files were encrypted, the files also included information that actors can use to gain access to customer’s SonicWall Firewall devices

TIP: Important Update

SonicWall Firewalls with preference files backed up in MySonicWall.com

Further Details

Actors can access file information to use to gain access to customer’s SonicWall Firewall devices

CERTVU recommend all SonicWall Customers to log on into their customer account to verify whether their device is at risk. Customers with at-risk devices should implement the SonicWall advisory containment and remediation guidance immediately.