SecuritySiliconANGLEabout 2 hours ago
Akira Safe Mode attack blinds EDR, fails to encrypt
1 min read
An Akira ransomware affiliate rebooted a victim's Windows server into Safe Mode, disabling Huntress and Defender, but the reboot also broke the encryptor. The attack entered via a SonicWall SSL VPN without multifactor authentication on Aug. 4. Nothing was encrypted, but credentials and file shares were already exfiltrated.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
