THREAT OPS › Threat News › Proxying to Compromise: SonicWall Secure Mobile Access 0-day Exploitation
Proxying to Compromise: SonicWall Secure Mobile Access 0-day Exploitation
<p><!-- START MG ACF TO CONTENT --></p> <div style="display: none;"> <section class="mgpb-hero mgpb-hero--detail mgpb-hero--dark-blue mgpb-hero--none mgpb-hero--image"> <div class="mgpb-hero__container container"> <div class="row"> <div class="col-12"> <div class="mgpb-hero__inner d-flex flex-column align-items-center justify-content-between flex-lg-row"> <div class="mgpb-hero__content"> <div></di
MITRE ATT&CK techniques
Indicators of compromise
- 81a9af3846bad3a1107164ff7cf0a08e020b31a3b32fd17866e17d4c1565f7f2sha256
- 8c470301dcb7278f73e622f1950073567b34011c64b60cdfbb0f89803923a5a3sha256
- 1e1e68bbb899450a57274a8b12082ed4e2040a2aae77014f20431689d2b4edeesha256
- ea9154e374e4f77bc2cf54282e23543573980342a85bc888cb23f20b8bbba081sha256
- 04d4a9fbb32e967200eb98be014ca914a03bfa6bsha1
- b4ee1f50fbb49f0ff5fde3d026343bc23ee08d51sha1
- c2b0ae0a1f42a139abe4dd612676066ec1426394sha1
- 5e5b716f2385c818ec61198be1a2a07a4560eac5sha1
- 5cb00bbfe818ee3e85fb99ab1db1af7cmd5
- b6df166291f80ee89032d769c99714f3md5
- 54d21399b8b52b48a0fef68450593e45md5
- 5f3a55201c511c9ff9be4c16c41028a2md5
- CVE-2026-15409cve
- CVE-2026-15410cve
- CVE-2026-154010cve
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0008url
- http://127.0.0.1:8085url
- https://www.rapid7.com/blog/post/etr-rapid7-mdr-team-discovers-new-sonicwall-sma1000-zero-days-being-actively-exploited-cve-2026-15409-cve-2026-15410/url
- https://www.man7.org/linux/man-pages/man2/setuid.2.htmlurl
- https://www.kernel.org/doc/html/latest/filesystems/proc.htmlurl
- https://docs.oracle.com/javase/8/docs/technotes/guides/attach/url
- https://docs.oracle.com/en/java/javase/25/docs/api/java.instrument/java/lang/instrument/Instrumentation.htmlurl
- https://spur.usurl
- 149.0.0.1ipv4
- 108.205.8.173ipv4
- 147.45.51.19ipv4
- 150.241.210.53ipv4
- 202.8.105.201ipv4
- 217.77.15.99ipv4
- 42.200.172.14ipv4
- 81.19.140.217ipv4
- 89.117.20.1ipv4