The campaign has been linked to UNC3886, a threat actor known for its previous attacks against vulnerable VMware and Fortinet appliances.

The campaign has been linked to UNC3886, a threat actor known for its previous attacks against vulnerable VMware and Fortinet appliances.