Up a Creek Without a Command Line: Mapping an Akira Ransomware Attack
Huntress mapped an Akira ransomware intrusion that used RDP, LSASS dumping, GOST tunneling, and RClone.
3
3 stories, newest first · one card per story
Huntress mapped an Akira ransomware intrusion that used RDP, LSASS dumping, GOST tunneling, and RClone.

Threat actors impersonate IT support in Microsoft Teams chats to deliver SynkLoader malware and harvest Windows credentials via fake lock screens.
Ubuntu fixed Rclone CVE-2026-49980, where unauthenticated requests to the remote control API can execute arbitrary commands.
Today 1.6K readers · 2.5K views · 779 reads · all time 189K views