UNC6148

Reports: 1
Last reported: 16 July 2025
Known CVEs: 6

ID: unc6148
Sources: MISP Malpedia
Merge evidence: 1 alias match

Reports per quarter

2025 Q3: 1 report

Dated reports, 2025 Q3 to 2025 Q3.

CVEs named in reports

CVE-2021-20035 KEV
CVE-2021-20038 KEV ransomware
CVE-2021-20039
CVE-2023-44221 KEV
CVE-2024-38475 KEV
CVE-2025-32819

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

16 July 2025

Ongoing SonicWall Secure Mobile Access (SMA) Exploitation Campaign using the OVERSTEP Backdoor

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ongoing SonicWall Secure Mobile Access (SMA) Exploitation Campaign using the OVERSTEP Backdoor

Newest first. Details opens the report in Explore.