akira

AKIRA operates as a ransomware group with an extortion-focused model that steals data and threatens public release on its leak site, employing post-compromise access and tradecraft such as Safe Mode evasion of EDR and credential spraying against exposed VPNs. The victims span manufacturing, business services, technology, construction, agriculture and food production, with more than 1,400 victims claimed and the US, Canada, Germany, the United Kingdom and Italy most frequently affected. Recent reporting shows a pattern of data theft followed by public disclosure on the leak site, illustrated by AKIRA listing Lazyboyz and Southern California Telephone Company as victims on its leak site.

Sectors: Manufacturing, Business Services, Technology · Countries: US, CA, DE