Akira: Veeam Credential Extraction via psql.exe Querying VeeamBackup DB
Detects the use of the PostgreSQL client utility (psql.exe) to query the 'VeeamBackup' database, a technique observed in Akira ransomware intrusions to extract sensitive credentials directly from the backup server's configuration.
YARA-L
