A nineteen-day Akira-family intrusion that began with a pasted command and ended with encryption inside an attacker-built VM. Publication Stoïk CERT · Classification Public We have redacted the victim organisation, its hosts, users, internal addresses, product estate and the compromised third-party website. Attacker infrastructure is defanged. Days