Back to Threat Feed
INC Ransomware Emerges as Dominant Actor Exploiting SonicWall SMA 1000 Flaws
Port & Service
Published on August 4, 2026 at 12:00 PM

INC Ransomware Emerges as Dominant Actor Exploiting SonicWall SMA 1000 Flaws

Ransomware group INC has been actively targeting unpatched SonicWall SMA 1000 series SSL-VPN appliances to breach corporate perimeters and deploy encryption payloads.

Source: The Hacker News

How Mangudai Discovers This Issue

Mangudai's Port & Service module automatically identifies exposed SonicWall VPN portals on public perimeters and alerts your security team to unpatched firmware vulnerabilities.

Continuous Autonomous AuditsMangudai scans target perimeters multiple times daily to catch configuration drift instantly.
Zero-Agent ArchitectureIdentifies exposure angles without requiring local installations or server access.
Launch Scan For My Domain