Heightened In-The-Wild Activity On Key Technologies Observed On March 28
Summary: GreyNoise observed a significant spike in activity targeting multiple edge technologies on March 28, including SonicWall, Zoho, Zyxel, F5, Linksys, and Ivanti systems, with some of these being edge systems and others primarily internal management tools. On April 7, GreyNoise observed a significant rise in exploitation attempts against Linksys E-Series routers, activity it assesses is linked to Mirai.
What's compelling: The same probing that hit SonicWall, Zoho, Zyxel, F5, Linksys, and Ivanti on March 28 escalated to active Mirai-linked exploitation of Linksys E-Series routers by April 7, and GreyNoise notes routers and edge technologies are attracting significant interest from advanced, well-resourced attackers.
Read the original at GreyNoise Blog ↗
- Topics
- Threat Actors & Nation-State
- Related
- University of Texas at Arlington warns personal information stolen during cyberattack Cyber Risks · Nov 13, 2026Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files Cyber Risks · Nov 13, 2026Hackers compromise 4,800 GitHub accounts to steal cloud credentials Cyber Risks · Nov 12, 2026