Akira is a financially motivated ransomware-as-a-service (RaaS) operation that emerged in March 2023, targeting large enterprises and critical infrastructure sectors. The group is distinguished by its use of multi-layered extortion tactics, including threats to release sensitive data, notify regulatory bodies of breaches, and launch distributed denial-of-service (DDoS) attacks. Preliminary research suggests a connection between Akira and threat actors associated with the defunct Conti ransomware operation, and the group has been observed communicating in Russian on dark web forums and designing its ransomware to avoid execution on systems with Russian keyboard layouts. Akira has notably demonstrated an ability to quickly incorporate new vulnerabilities into its exploitation toolkit, often deploying attacks within hours of a vulnerability's public disclosure, and has evolved to specifically target hypervisors and VMware ESXi environments, allowing for the rapid encryption of numerous vi

Aliases del actor

Storm-1567GOLD SAHARAPUNK SPIDER

Actores similares

Scattered Spiderthreat-actor · 2doppel-spideractor · 1salty-spideractor · 1brain-spideractor · 1skeleton-spideractor · 1bamboo-spideractor · 1andromeda-spideractor · 1cobalt-spideractor · 1boson-spideractor · 1dextorous-spideractor · 1

Paises afectados

Sectores atacados

URLs nuevas detectadas en IntelTracker