A campaign has been observed targeting Palo Alto GlobalProtect portals with login attempts and launching scanning activity against SonicWall SonicOS API endpoints. The activity started on December 2nd ...
GreyNoise has identified a coordinated credential-based campaign abusing VPN login portals from Cisco and Palo Alto Networks.
An automated campaign is targeting multiple VPN platforms, with credential-based attacks being observed on Palo Alto Networks ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback