Security researchers have observed the Akira ransomware gang use a unique attack vector to bypass EDR protection. The Akira ransomware gang is a pretty prolific operation and remarkably fond of old school computing vibes. Its darknet leak site is laid...

notes, executive bonus schemes, payroll details, and a wealth of client data have all been exposed on the darknet. The Akira ransomware gang has dropped over 90 gigabytes of data belonging to Frost & Sullivan on its darknet leak site, claiming that the...

cent to 320 incidents. The three-month figure remains on a downward trend, however. 8Base was responsible for 11 incidents, Akira five, and BianLian three – all players we’ve seen jockey in the top five. The US remained the most targeted country in...

chalked up 38 per cent of all attacks. The Stormous gang made a new appearance in the top five, with seven attacks, while Akira and 8Base were responsible for five and four incidents, respectively. Thankfully, overall numbers are down this week....

much every ransomware group was far less active this week. Black Basta picks up second with eight attacks, followed by Akira, ALPHV, and 8Base with four incidents apiece. A few new entrants in the top five this week, but both ALPHV and Hunters had lower...

users of TeamViewer may need to watch out. LockBit accounted for a total of 26 per cent of all ransomware attacks. 8Base and Akira come next, with five attacks apiece. NONAME targeted four victims, and BianLian three. There have been 3,478 total...

began investigating a malicious campaign targeting its firewall devices in early August, which soon turned out to be the Akira ransomware gang using a bring-your-own-vulnerable-driver (BYOVD) attack against the devices. By 11 September, the Australian...

ransomware. Analysts at Arctic Wolf have gone even further, laying the blame for the malicious activity at the feet of the Akira ransomware operation. Arctic Wolf dated the activity back to 15 July and noted that it has observed similar SonicWall...

to new infrastructure. That means that an Australian organisation is, on balance, most likely to be targeted by the Akira ransomware gang, the third-most active in the country behind LockBit and RansomHub, so it’s the communications of that group that...

The Akira ransomware gang is enjoying an influx of “pen-testers”, according to a security researcher’s report. Infamous ransomware-as-a-service operation LockBit may still be in operation, but it appears last month’s takedown of the gang by an...

operators, with Qilin leading leak-site activity with 357 darknet leak posts, followed by The Gentlemen with 206 and Akira with 174. The company also observed widespread abuse of remote monitoring and management (RMM) tools, which accounted for 22.9 per...

of 2025, with only seven reported attacks. Perhaps unsurprisingly, Clop takes first place with 154 incidents, followed by Akira with 83, RansomHub with 82, and Lynx with 48. “Organisations must urgently enhance cyber security defences through the...

the first six months of 2024 – a 41.18 per cent increase. Qilin led the rankings with 209 victims, followed by SafePay and Akira (both with 130 victims), and the Play ransomware operation which listed 125 victims on its leak site. Lynx rounds out the...

10 and the number of leak posts made in the first three months of 2025: Clop 413 RansomHub 232 Babuk 168 Babuk-Bjorka 163 Akira 135 Lynx 115 Qilin 111 FunkSec 96 Cactus 94 Play 84 The big trends The Black Basta ransomware group appears to have...

nearly 700 leak posts. Qilin, which runs a ransomware-as-a-service operation, was followed by The Gentlemen, DragonForce, Akira, and Inc Ransom – all groups that have been active in the ANZ region. However, while the groups are different, the attacks...

the most impacted sub-sector. The Qilin group in particular led the charge with 138 incidents, and just four groups – Qilin, Akira, Play, and INC Ransom – accounted for 40 per cent of all those tracked. Emerging threats Entirely new and rebranding...

be fragmented, however, with Qilin recording 357 leak-site posts during the quarter, followed by The Gentlemen with 206 and Akira with 174. It should be noted that not all leak posts equate to an actual leak of data, particularly, at the moment, in the...

security firm Arctic Wolf has reportedly uncovered several instances in which victims of ransomware attacks claimed by the Akira and Royal ransomware groups that paid a ransom were contacted for additional attempts at extortion. On top of this, the...

operators are increasingly using remote encryption techniques as part of their attacks. This includes threat actors such as Akira, ALPHV/BlackCat, LockBit, Royal, and Black Basta – all of whom have been very active in 2023 and nearly all of whom have...

regarding the Russian invasion of Ukraine in 2022. Groups that are thought to be made of refugees from the group include Akira, Black Basta, Hunters International, and DevMan. UPDATE 09/04/26 - Clarified response from Jones Day's Australian office.