CyberWallSECURITY

Home / Security journal / Ransomware

Ransomware · Advisory archive

Akira ransomware: what defenders should know

A joint advisory described Akira ransomware and observed tactics. It provides technical information intended to help defenders recognize and respond to activity associated with the group.

This briefing explains a public 2024 advisory. It is not a live incident feed; consult the original source and current vendor guidance for updates.

What the advisory tells us

The agencies reported that Akira initially focused on Windows and later deployed a Linux variant targeting VMware ESXi virtual machines. The advisory said more than 250 organizations had been affected as of January 1, 2024; that number is historical, not a current count.

What teams can do

Prioritize patched external services, strong authentication, usable backups and an incident response plan. Review the advisory and current updates for the specific environment.

Read the original advisory

FBI IC3 / federal partners: source advisory (PDF) ↗

The linked advisory is an independent government source. It does not endorse CyberWall or its products.

Continue reading

SQL injection: prevent a familiar application flaw

Read next →