New Ransomware Campaign Mimics Akira Targeting South American Windows Users

• •A new ransomware campaign is targeting Windows users in South America.
• •The campaign closely mimics the Akira ransomware group's branding and tactics.
• •No specific CVEs have been disclosed, but the threat is currently active.

A new ransomware campaign has emerged, specifically targeting Windows users in South America. This campaign closely imitates the notorious Akira ransomware group, adopting similar branding, ransom notes, and dark web infrastructure references. ESET has identified that the threat actors are leveraging Akira's reputation to enhance the effectiveness of their attacks. The attack method involves exploiting vulnerabilities in Windows systems, although specific CVEs have not been disclosed. The scope of the impact is currently limited to South America, but the potential for broader implications exists if the campaign spreads. Security professionals are advised to remain vigilant as the situation develops. The current status of the campaign is active, with ongoing investigations into the threat actors' tactics and tools.