[ Security Advisory ] Critical Security Notice for Unpatched SonicWall Devices

// Overview  

SonicWall has published an urgent notice indicating a ransomware campaign targeting End-of-Life (EOL) SonicWall Secure Mobile Access (SMA) 100 series and Secure Remote Access (SRA) devices. Details are currently limited, but we are monitoring the situation and will provide additional guidance as new information is disclosed.

The announcement listed below in the references section has all the current publicly known information regarding this activity. 

// What you should do 

If you use a SonicWall SMA and/or SRA devices running unpatched EOL firmware 8.x, the current guidance from SonicWall PSIRT is as follows:

• ·                 Disconnect device from the network
• ·                 Reset Credentials
• ·                 Enable/Implement MFA 

Currently, SonicWall devices running firmware 9.x and higher are not impacted. 

// References 

• §     SonicWall Notice -- https://www.sonicwall.com/support/product-notification/urgent-security-notice-critical-risk-to-unpatched-end-of-life-sra-sma-8-x-remote-access-devices/210713105333210/