Microsoft Defender Thwarts Large-Scale Akira Ransomware Attack

Microsoft on Wednesday said that a user containment feature in Microsoft Defender for Endpoint helped thwart a « large-scale remote encryption attempt » made by Akira ransomware actors targeting an unknown industrial organization in early June 2023.
The tech giant’s threat intelligence team is tracking the operator as Storm-1567.
The attack leveraged devices that were not onboarded to Microsoft