A joint advisory from Europol and US and Dutch government agencies estimated that Akira made around $42m in ransomware proceeds from March 2023 to January 2024
Zscaler also confirmed MadMxShell uses DLL sideloading and DNS tunneling for C2 communication