From Armillaria loader to EDR killer
12d ago
Source
ThreatLockerFrom Armillaria loader to EDR killerthreatlocker.comIn the criminal sphere of ransomware, Akira is known for its abundance of victims and utilizing its opportunism to achieve its goals. The Threat Intelligence team has captured samples of both the Armillaria loader and the EDR killer used by Akira, and this analysis aims to highlight the tactics leveraged to successfully terminate endpoint security vendor products.
You might also wanna read
Akira Ransomware Attack: Hypervisor Compromise, VM Creation, and Data Exfiltration via LimeWire
A threat actor breached a victim environment by accessing a hypervisor and creating a new virtual machine to stage and launch Akira ransomwa
hendryadrian.com·24d agoAttackers Bypass Next-Gen EDR Using Windows Error Reporting and io_uring Techniques
This article examines advanced EDR (Endpoint Detection and Response) bypass techniques used by attackers, focusing on two specific methods:
undercodetesting.com·10d agoAttackers Bypass Next-Gen EDR Using Windows Error Reporting and io_uring Techniques
This article examines advanced EDR (Endpoint Detection and Response) bypass techniques used by attackers, focusing on two specific methods:
undercodetesting.com·10d agoAI Agent Exploits Langflow RCE to Automate Database Ransomware Attack
thehackernews.com·5d ago
Threat Actors Use AI to Automate EDR Evasion Testing, Sophos Research Reveals
Sophos X-Ops researchers discovered an unidentified threat actor using AI technology to develop EDR evasion tactics through a red team post-
darkreading.com·1mo ago
Demystifying Endpoint Detection And Response (EDR) Technology
Packetlabs·1mo ago
Why this fully agentic ransomware attack is giving researchers nightmares
zdnet.com·17h ago

Comments
Sign in to join the conversation.
No comments yet. Be the first.