
- Experts warn Akira is using SonicWall VPNs to deploy two drivers
- One is a legitimate, vulnerable driver that allows the other one to be executed
- The other one disables antivirus and endpoint protection tools
Akira ransomware has dominated the headlines recently due to its abuse of SonicWall SSL VPNs to gain initial access and deploy an encryptor.