nearly 700 leak posts. Qilin, which runs a ransomware-as-a-service operation, was followed by The Gentlemen, DragonForce, Akira, and Inc Ransom – all groups that have been active in the ANZ region. However, while the groups are different, the attacks...

be fragmented, however, with Qilin recording 357 leak-site posts during the quarter, followed by The Gentlemen with 206 and Akira with 174. It should be noted that not all leak posts equate to an actual leak of data, particularly, at the moment, in the...

operators, with Qilin leading leak-site activity with 357 darknet leak posts, followed by The Gentlemen with 206 and Akira with 174. The company also observed widespread abuse of remote monitoring and management (RMM) tools, which accounted for 22.9 per...

regarding the Russian invasion of Ukraine in 2022. Groups that are thought to be made of refugees from the group include Akira, Black Basta, Hunters International, and DevMan. UPDATE 09/04/26 - Clarified response from Jones Day's Australian office.

victims since. It has been far and away the most active ransomware group over the last three months, with its nearest rival, Akira, listing 193 victims so far in 2026, compared to Qilin’s 368. Like other RaaS operations, Qilin offers its ransomware to...

the most impacted sub-sector. The Qilin group in particular led the charge with 138 incidents, and just four groups – Qilin, Akira, Play, and INC Ransom – accounted for 40 per cent of all those tracked. Emerging threats Entirely new and rebranding...

Ransomware group Akira says it has a trove of data, including information regarding Nobu’s co-owner, Robert De Niro. The Akira ransomware gang has listed high-end restaurant chain Nobu as a victim on its darknet leak site, and it is threatening to...

Akira’s ransomware-as-a-service operation has been highly active in seeking out Australian targets – here’s what network defenders need to know about the hackers’ recent activity. Threat analysts at cyber security firm Barracuda have observed a change...

200 company Quanta Services as of this year, which is a “leading contractor in electric power and pipeline services”. The Akira ransomware gang listed Intellect Systems on its dark web leak site earlier this week, claiming to have exfiltrated corporate...

began investigating a malicious campaign targeting its firewall devices in early August, which soon turned out to be the Akira ransomware gang using a bring-your-own-vulnerable-driver (BYOVD) attack against the devices. By 11 September, the Australian...

Akira is targeting Australian companies using SonicWall firewall devices, but the ACSC’s recent warning is just the tip of the iceberg. Security analysts and SonicWall itself have been warning of malicious activity targeting its firewall devices since...

a high alert warning regarding an increase in hacker activity targeting Australian organisations. “We are aware of the Akira ransomware targeting vulnerable Australian organisations through SonicWall SSL VPNs,” the ASD said in a 10 September statement....

attack to exploit SonicWall firewall devices. Analysts at multiple cyber security firms recently warned of affiliates of the Akira ransomware gang targeting an unknown vulnerability in SonicWall Gen 7 Firewalls, but now we know exactly how the hackers...

the first six months of 2024 – a 41.18 per cent increase. Qilin led the rankings with 209 victims, followed by SafePay and Akira (both with 130 victims), and the Play ransomware operation which listed 125 victims on its leak site. Lynx rounds out the...

ransomware. Analysts at Arctic Wolf have gone even further, laying the blame for the malicious activity at the feet of the Akira ransomware operation. Arctic Wolf dated the activity back to 15 July and noted that it has observed similar SonicWall...

customers was hit by an alleged ransomware attack, with customer details potentially exposed. On its darknet leak site, the Akira ransomware gang has listed a novated lease provider that works with public sector organisations and not-for-profits....

to new infrastructure. That means that an Australian organisation is, on balance, most likely to be targeted by the Akira ransomware gang, the third-most active in the country behind LockBit and RansomHub, so it’s the communications of that group that...

of 2025, with only seven reported attacks. Perhaps unsurprisingly, Clop takes first place with 154 incidents, followed by Akira with 83, RansomHub with 82, and Lynx with 48. “Organisations must urgently enhance cyber security defences through the...

like businesses. They collaborate, specialise and focus on return on investment. We have seen ransomware groups, like Akira and Conti affiliates, target Australian hospitality brands by exploiting third-party vendors and stolen credentials,” Craig...

Hackers claim to have stolen almost 20 gigabytes of data from a Brisbane-based steel industry firm. The Akira ransomware operation has listed Australian firm Watkins Steel on its darknet leak site, claiming to have stolen 17 gigabytes of data in a...