Akira Ransomware: Lightning-Fast Data Exfiltration in 2-ish Hours

BlackBerry Threat Research analyzed a June Akira ransomware incident in which Storm-1567 exploited an unpatched Veeam backup server (likely CVE-2023-27532) to quickly exfiltrate sensitive data (133 minutes) using living-off-the-land tools (WinSCP, Advanced IP Scanner, AnyDesk) and returned the next day to deploy Akira ransomware network-wide; the report warns of rapidly shrinking time-to-exfiltration and recommends zero-trust, diligent patching, and basic network hygiene such as port restrictions.