Akira Ransomware Post-Exploitation Activity Following SonicWall Exploitation

Aaron Mog@AaronMogS2S

•updated Aug 14, 2025•8•0•142

Detects a variety of post-exploitation techniques observed in attacks leveraging SonicWall vulnerabilities (CVE-2024-40766). These techniques are associated with the Akira ransomware group and include defense evasion, credential access, and data staging.