Threat IntelligenceJul 29, 2026
Huntress Flags Widespread Credential Stuffing Campaign Hitting SonicWall Devices
Huntress reports active credential stuffing campaign targeting SonicWall VPN and firewall devices.
Vendor Watch
Run SonicWall?
Get an email when a reviewed story names SonicWall, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch works
Summary
Huntress has disclosed a widespread credential stuffing campaign actively targeting SonicWall VPN and firewall appliances, with at least 30 organizations' accounts already compromised at the time of reporting. The campaign is described as unusual and rapidly growing, indicating a significant threat to organizations using these appliances. The advisory highlights the need for immediate security attention to protect against further account takeovers.
Entities
SonicWall (vendor)SonicWall VPN (product)SonicWall Firewall (product)Huntress (vendor)