Akira: Veeam Credential Theft via psql.exe Querying VeeamBackup PostgreSQL DB

Ibrahim Saud@tektrix

•updated Jun 29, 2026•1•0•1

Detects execution of psql.exe with command line arguments containing 'VeeamBackup' and 'credentials', which may indicate an attempt to access or extract credentials from a PostgreSQL database associated with Veeam Backup software.