Back to Feed
Threat IntelligenceJul 29, 2026

Huntress Flags Widespread Credential Stuffing Campaign Hitting SonicWall Devices

Huntress reports active credential stuffing campaign targeting SonicWall VPN and firewall devices.

Summary

Huntress has disclosed a widespread credential stuffing campaign actively targeting SonicWall VPN and firewall appliances, with at least 30 organizations' accounts already compromised at the time of reporting. The campaign is described as unusual and rapidly growing, indicating a significant threat to organizations using these appliances. The advisory highlights the need for immediate security attention to protect against further account takeovers.

Entities

SonicWall (vendor)SonicWall VPN (product)SonicWall Firewall (product)Huntress (vendor)