Huntress Flags Widespread Credential Stuffing Campaign Hitting SonicWall Devices

Managed detection and response provider Huntress has issued a threat advisory warning of an active and rapidly growing credential stuffing campaign targeting SonicWall VPN and firewall appliances, with the company reporting that logins to 30 organisations’ accounts had already been compromised at the time of publication. According to Huntress’s Security Operations Centre (SOC), the unusual activity was first detected on 25 July 2026 at around 18:02 UTC, when analysts noticed an anomalous spike i