Akira

☆ pin

Also known as Akira v2

Reports

205

First seen

May 22, 2024

Last seen

Oct 15, 2026

Motivation

Financial

Relationships

Filled ◆ = CVE exploited in the wild. Entities that appear together in Signalis reporting — co-mention, not confirmed collaboration. Reports naming many actors at once (weekly roundups) are excluded from relationship edges.

Targeting

Sectors

Manufacturing ×21 Other ×14 Professional Services ×13 Retail & E-commerce ×11 Financial Services ×7 Hospitality ×7 Agriculture ×4 Transport & Logistics ×4

Victim regions

×1

×54

United States×54

Germany×5

United Kingdom×2

Guyana×2

Spain×2

Canada×2

Czechia×1

Japan×1

Victim country, only when stated. Corpus is predominantly English-language reporting, so US/EU coverage is overweighted relative to true victim distribution.

Top ATT&CK techniques

T1486 Data Encrypted for Impact ×23T1566 Phishing ×14T1219 Remote Access Software ×10T1021.001 Remote Services: Remote Desktop Protocol ×10T1190 Exploit Public-Facing Application ×10T1133 External Remote Services ×9T1021 Remote Services ×9T1078 Valid Accounts ×8T1110 Brute Force ×8T1562.001 Impair Defenses: Disable or Modify Tools ×8T1018 Remote System Discovery ×7T1195 Supply Chain Compromise ×6

Indicators

domain ×224filename ×133cve ×52ip_v4 ×39hash_sha256 ×12hash_sha1 ×5registry_key ×4hash_md5 ×3

Indicator values are available on Pro and via the API.

Recent reports

High

Akira

Relationships

Targeting

Top ATT&CK techniques

Indicators

Associated CVEs

Recent reports

Akira ransomware gang publishes new victim: Videk

Akira ransomware gang publishes Videk as new victim

Akira ransomware gang publishes Boyle, Pecharich, Cline, Whittington and Stallings as victim

Akira ransomware claims Boyle, Pecharich, Cline, Whittington and Stallings as victim

Akira ransomware claims Sun Valley Dairy as victim

Akira publishes Sun Valley Dairy as ransomware victim

Akira ransomware gang publishes FOODMatch as victim

Akira ransomware gang publishes Shediac Lobster Shop as victim

Akira ransomware gang publishes Shediac Lobster Shop as victim

Akira ransomware group publishes Torns Enterprises as victim

Akira ransomware claims Torns Enterprises as victim

Akira ransomware publishes AAA Architectural Hardware as victim

Akira ransomware publishes Louis Fusco as victim

Akira ransomware publishes PIC GROUP, INC as victim

Akira ransomware gang publishes Yarema as new victim

Akira ransomware claims Design Electric as new victim

Akira ransomware claims TigerPress (DCC) as new victim

Akira ransomware claims Michael K. Shelby, CPA as victim

Akira ransomware gang publishes Hygrade as new victim

Akira Ransomware Post-Compromise Investigation: RDP Access, Credential Theft, and GOST Tunneling

Akira ransomware publishes The Official College of Architects of León (COAL) as victim

Akira ransomware gang publishes The Official College of Architects of León (COAL) as victim

Akira ransomware gang publishes Jampac Alimentos as new victim

Akira ransomware claims Pacific Tank Lines breach

Akira ransomware gang publishes Wesmar as new victim

Akira ransomware gang publishes DPL Group as victim

Akira ransomware claims Krycler, Ervin, Taubman & Kaminsky as victim

Akira ransomware publishes Geebee Garments as victim

Akira ransomware claims new victim: Knit

Akira ransomware operators claim new victim: Wallatec