A new campaign is targeting Palo Alto GlobalProtect VPN portals with login attempts and conducting scanning activities against SonicWall SonicOS API endpoints. This represents an active threat against enterprise VPN infrastructure that could lead to unauthorized network access if successful. Organizations using these platforms should monitor for suspicious login activity and implement additional security measures.