Malware

Akira ransomware

0 mentions in 7 days · 0 in 30 days · 2 total · first seen Aug 12, 2026 · last Aug 13, 2026

Timeline2 articles

Akira Affiliate Crashes Ransomware After Attempting EDR Evasion

Huntress documented an Akira ransomware affiliate attack that failed after its anti-EDR tool crashed legitimate software and stopped encryption before completion.

Infosecurity Magazine reports on Huntress research into a failed Akira ransomware affiliate attack. The affiliate attempted EDR evasion using an anti-EDR tool, but the tool interfered with legitimate software on the client's system. The interference crashed the ransomware before encryption completed, sabotaging the attack; no completed encryption was reported.

Infosecurity MagazineAug 13, 09:30 UTC · Aug 13, 2026Ransomware

Akira Hits Safe Mode: Ransomware Rebooting Around EDR

Huntress documents an Akira ransomware affiliate rebooting endpoints into Windows Safe Mode to evade EDR and Defender, though Safe Mode broke the ransomware.

Huntress observed an Akira ransomware affiliate rebooting victim machines into Windows Safe Mode to disable EDR and Microsoft Defender before deploying ransomware. In an ironic twist, Safe Mode also prevented the ransomware from executing properly. The post walks through the full attack chain and the defensive lessons.

HuntressAug 12, 13:00 UTC · Aug 12, 2026Ransomware in the wild

Appears with

threat actor Akira 2 organization Huntress 2 vendor Huntress 2 organization Akira 1 product Microsoft Defender 1 vendor Microsoft 1

Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.