Microsoft Defender Thwarts Large-Scale Akira Ransomware Attack

Microsoft on Wednesday said that a user containment feature in Microsoft Defender for Endpoint helped thwart a "large-scale remote encryption attempt" made by Akira ransomware actors targeting an unknown industrial organization in early June 2023.
The tech giant's threat intelligence team is tracking the operator as Storm-1567.
The attack leveraged devices that were not onboarded to Microsoft

akira akira ransomware attack containment defender devices encryption endpoint feature giant industrial intelligence june june 2023 large microsoft microsoft defender microsoft defender for endpoint organization ransomware ransomware attack scale storm targeting team tech threat threat intelligence tracking