Next, Akira used Remote Desktop Protocol (RDP ... containing the ransomware payload (win.exe), but the victim's EDR tool detected and quarantined it, essentially blocking the attack.