Threat actor
UTA0533
Tracked by CyberSIXT since Jul 19, 2026 · last activity Jul 21, 2026
Associated CVEs
Coverage timeline
-
SonicWall SMA 1000 zero day used to spread KNUCKLEBALLsocradar.io · Jul 21, 2026
-
SonicWall Zero-Days Exploited to Deliver Custom Malware for Weeks Before Patchwww.securityweek.com · Jul 20, 2026
-
Zero day exploits hit SonicWall VPN, giving attackers root accesssecurityaffairs.com · Jul 20, 2026
-
Zero day exploit targets SonicWall SMA 1000, installs malwaresecurityonline.info · Jul 19, 2026