A ransomware group known as INC has become the primary actor exploiting a pair of critical vulnerabilities in SonicWall Secure Mobile Access (SMA) 1000 series appliances, accelerating a global campaign that has claimed hundreds of victims this year.