Back Cybersecuritynews

New Akira Lookalike Ransomware Campaign Targeting Windows Users in South America

Cybersecuritynews •Tushar Subhra Dutta • April 2, 2026

A new and dangerous ransomware campaign has surfaced across South America, targeting Windows users with a carefully crafted strain that closely imitates the well-known Akira ransomware. While the two may appear nearly identical on the surface, this new threat is built on an entirely different foundation — one that quietly borrows from another notorious ransomware […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

New Ransomware Campaign Mimics Akira Targeting South American Windows Users A new ransomware campaign has emerged, specifically targeting Windows users in South America. This campaign closely imitates the notorious Akira ransomware group, adopting similar branding, ransom notes, and dark web infrastructure references. ESET has identified that the threat actors are leveraging Akira's reputation to enhance the effectiveness of their attacks. The attack method involves exploiting vulnerabilities in Windows systems, although specific CVEs have not been disclosed. The scope of the impact is currently limited to South America, but the potential for broader implications exists if the campaign spreads. Security professionals are advised to remain vigilant as the situation develops. The current status of the campaign is active, with ongoing investigations into the threat actors' tactics and tools. 2 sources 49

Extracted Entities

New Akira Lookalike Ransomware Campaign Targeting Windows Users in South America

The full story

Extracted Entities

Attack Types (1)

Campaigns (1)

Platforms (1)

Ransomware Groups (1)