As per SonicWall security notice, threat actors actively targeting Secure Mobile Access (SMA) 100 series and Secure Remote Access (SRA) products running unpatched and end-of-life (EOL) 8.x firmware in an imminent ransomware campaign using stolen credentials.

The exploitation targets a known vulnerability that has been patched in newer versions of firmware. Organizations that fail to take appropriate actions to mitigate these vulnerabilities on their SRA and SMA 100 series products are at imminent risk of a targeted ransomware attack. Organizations who are using SonicWall are encouraged to check the Product(s) used in their environment and take the mitigation action as soon as possible.