Akira Ransomware Targets Nutanix Virtual Machines

It seems Akira ransomware is shaking things up again. This time, it’s setting its sights on Nutanix AHV virtual machines. Recent alerts from the U.S. Cybersecurity and Infrastructure Security Agency (CISA) and other bodies outline this alarming shift. Akira’s new focus underscores its evolving strategy, achieving substantial impacts.

June 2025 marked the turning point, as Akira began encrypting Nutanix AHV VM disk files by exploiting a serious vulnerability in SonicWall’s SonicOS. This vulnerability, tagged CVE-2024-40766, is nothing short of critical. With a severity score of 9.6/10, it opens doors for unauthorized access and potentially devastates firewall systems. This affects SonicWall Gen 5, Gen 6, and certain Gen 7 devices that haven’t updated to SonicOS 7.0.1-5035.

Not stopping there, Akira has used gaps in unpatched Veeam Backup & Replication servers to introduce remote tools like AnyDesk and LogMeIn, which helped them move laterally and erase vital backups. The financial impact is stark, with over $240 million already extorted.

If your organization uses Nutanix, it’s time to double down on defense. Update your software, enhance your endpoint protection, and don’t skip on multi-factor authentication. These steps are crucial in mitigating these threats.

Stay Proactive Against Rising Threats

Nutanix’s AHV platform is well-known for its solid Linux-based virtualization functionality, managing various virtual machines efficiently. Experts saw this shift to Akira targeting Nutanix as a natural progression from its previous activities against platforms like VMware ESXi and Microsoft Hyper-V.

The takeaway from CISA’s report is straightforward: vigilance is key. Companies must stay alert to evolving ransomware threats, particularly those exploiting known vulnerabilities. Emphasizing robust patch management and strong user authentication will be essential in reducing risks.

Ultimately, keeping up with cybersecurity best practices isn’t just recommended—it’s necessary. So, follow guidance and updates that can help your organization navigate these tricky security waters with confidence.

Qsentinel: Stay above the curve with Qsentinel’s expert insights and proactive cybersecurity solutions. Contact us today to secure your infrastructure against emerging threats.

Ready to take data security seriously?

Discover how Qsentinel can protect your organization against ransomware, enforce true data sovereignty, and stay ahead of the quantum threat. Their purpose-built workspace is designed for exactly that.

👉 Check out Qsentinel now and secure your future.