They Got In Through SonicWall. Then They Tried to Kill | Huntress Huntress Blog 4 February 2026 at 16:00 Huntress responded to a 2026 intrusion using compromised SonicWall VPN credentials and a revoked EnCase forensic driver to terminate EDR processes via BYOVD.