Akira Ransomware Group Nets $244 Million: Attack Techniques Unveiled
Missed the CISO Forum 2025? Catch Up Anytime!
The CISO Forum 2025 Virtual Summit may have wrapped up, but it’s not too late to dive into its wealth of cybersecurity insights. All sessions are now available on demand, absolutely free. This means you can tune in at your convenience and soak up the latest industry discussions. Just head over to the official site to get started.
If staying informed on cybersecurity developments is a priority, make a habit of visiting SecurityWeek. They host a variety of webcasts and virtual events covering crucial security themes. Want more? Their extensive webcast library is just a click away, offering deep dives into pressing cybersecurity topics.
For those with a focus on industrial systems, the ICS Cybersecurity Conference offers dedicated insights. Designed around the needs of Industrial Control Systems, this is an event you won’t want to miss.
The Rise of Akira Ransomware
The Akira ransomware group has racked up more than $244 million through its operations, signaling a significant threat to enterprises worldwide. Emerging in early 2023, Akira has specifically honed its ransomware to target VMware ESXi servers. Their reach spans critical infrastructure across North America, Europe, and Australia.
A notable attack in June 2025 saw Akira encrypt sensitive virtual machine files on Nutanix servers by exploiting a vulnerability in SonicWall firewalls. This highlights their proficiency in navigating complex systems and exploiting known vulnerabilities like CVE-2020-3580 and CVE-2023-28252.
Akira’s tactics are highly sophisticated. They include using stolen credentials to compromise SonicWall devices, employing brute force on VPN endpoints, and deploying remote access tools. They’ve also been known to bypass file protections through clever maneuvers like copying domain controller data. Victims often see their data exfiltrated within hours, followed by a swift encryption process.
Stay ahead of such threats with continuous cybersecurity updates from SecurityWeek. Keep your defenses robust by understanding the evolving landscape of cyber threats. To stay fully informed, subscribe to SecurityWeek’s daily cybersecurity briefing.
—
For more insightful articles and the latest updates, visit SecurityWeek’s dedicated sections.
Ready to take data security seriously?
Discover how Qsentinel can protect your organization against ransomware, enforce true data sovereignty, and stay ahead of the quantum threat. Their purpose-built workspace is designed for exactly that.
Get daily news in your inbox
The lastest on Hacks, ransomware attacks, post quantum security and more
