Akira _v2

Malware & Tools · Akira _v2

· MalwareS1194 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

—

Description

Akira _v2 is a Rust-based variant of Akira ransomware that has been in use since at least 2024. Akira _v2 is designed to target VMware ESXi servers and includes a new command-line argument set and other expanded capabilities.(Citation: CISA Akira Ransomware APR 2024)(Citation: Cisco Akira Ransomware OCT 2024)(Citation: Palo Alto Howling Scorpius DEC 2024)

Tactic Coverage

discovery (2)impact (2)stealth (1)persistence (1)privilege escalation (1)

Used By (1 groups)

G1024AkiraGOLD SAHARA, PUNK SPIDER

Techniques (6)

T1083File and Directory Discovery

discovery

T1480Execution Guardrails

stealth

T1486Data Encrypted for Impact

impact

T1489Service Stop

impact

T1543Create or Modify System Process

persistenceprivilege escalation

T1654Log Enumeration

discovery

References

https://attack.mitre.org/software/S1194 https://www.cisa.gov/sites/default/files/2024-04/aa24-109a-stopransomware-akira-ransomware_2.pdf https://blog.talosintelligence.com/akira-ransomware-continues-to-evolve/https://unit42.paloaltonetworks.com/threat-assessment-howling-scorpius-akira-ransomware/