SonicWall SMA devices hacked with OVERSTEP rootkit tied to ransomware

Published on July 16, 2025

A threat actor has been deploying a previously unseen malware called OVERSTEP that modifies the boot process of fully-patched but no longer supported SonicWall Secure Mobile Access appliances. [...]