Since late July 2025, Arctic Wolf has tracked an increase in Akira ransomware activity targeting SonicWall SSL VPN accounts. This campaign remains active and continues to evolve, with new infrastructure tied to it observed as recently as September 20, 2025. ...