Akira Intrusion Used ClickFix to Gain Domain Admin and Encrypt 485,224 Files
A 19-day Akira-family intrusion began with a ClickFix prompt and ended with 485,224 files encrypted. Investigators traced credential access, persistence, 336 GB of exfiltration and encryption from an attacker-built VM.