GOOGLE FINDS CUSTOM BACKDOOR BEING INSTALLED ON SONICWALL NETWORK DEVICES

Summary from the TLDR InfoSec newsletter

Hackers (UNC6148) are compromising end-of-life SonicWall Secure Mobile Access appliances using leaked administrator credentials. The attackers install "Overstep" backdoor malware that deletes log entries, hindering forensic investigation, which means the attack method and vulnerabilities exploited remain unknown.