SecurityBleepingComputerabout 1 hour ago
Akira hackers disable EDR via Safe Mode
1 min read
An Akira ransomware affiliate disabled EDR by rebooting into Safe Mode with Networking, stealing data but failing to encrypt. Huntress observed the attack, which began via an exposed SonicWall VPN without MFA. The attackers used AnyDesk and s5cmd, completing the breach in under five hours.
Level
Hype check
Tap to vote and see what everyone thinks.
