What are brute-force attacks on firewalls?

Hackers guess passwords repeatedly on login pages of devices like SonicWall and Fortinet VPNs, aiming for network access. Most fail but probe for weaknesses.

Are Middle East brute-force attacks linked to Iran?

88% of IPs trace there amid US-Iran tensions, but could be proxies. Timing suggests geopolitical motive mixed with crime.

How do I protect against ClickFix scams?

Educate users on fake "fixes," restrict script execution, and monitor command-line anomalies with EDR tools.

🎯 Threat Intelligence

[88% From Middle East] Brute-Force Surge on SonicWall, Fortinet

Why are hackers pounding firewalls from the Middle East right now? A sharp brute-force surge on SonicWall and Fortinet devices signals deeper geopolitical rifts bleeding into corporate networks.

CVE Watch Apr 16, 2026 4 min read

Graph showing surge in brute-force attacks from Middle East on firewall devices

⚡ Key Takeaways

88% of brute-force attacks on SonicWall/Fortinet from Middle East IPs amid US-Iran tensions. 𝕏
ClickFix social engineering tricks users into running malicious scripts themselves, evading AV. 𝕏
Enforce MFA, strong passwords, and monitor logins to block perimeter breaches. 𝕏