Ransomware gang crashes own attack — with no-one to blame but themselves

A hand about to touch a phone. Superimposed on top of it is a pink triangle with exclamation mark inside it. Behind it is a computer display with code on it.

• Akira ransomware tried Safe Mode boot to disable defenses but broke its own encryptor
• Defender later flagged and quarantined payload, leaving attackers with only stolen data
• Huntress advises VPN brute‑force alerts, MFA, SIEM logging, and Safe Mode monitoring

A recent ransomware attack saw the operators Akira (figuratively) shoot themselves in the foot - and they still walked away with sensitive data, albeit limping.