attack evasion news

Ransomware Affiliate Sabotages Own Attack During EDR Evasion

A recent ransomware attack by an affiliate of the Akira group reportedly failed to encrypt a victim's files after the attacker's attempt to disable security tools backfired. The incident, which occurred in early August, involved the attacker rebooting the victim's system into Safe Mode, a tactic that ultimately prevented the ransomware payload from executing successfully.