Akira (Windows)
Aliases: REDBIKE
- First seen
- 2023-05-01 00:00:00
- Malware type
- ransomware
- Family
- Malware family
- Last IoC activity
- 2026-07-21 16:56:18
- Profile updated
- 2026-07-07 13:11:56
Targeted industries: financial-services healthcare-and-pharmaceutical manufacturing technology-and-telecommunications
Targeted regions: country_code:us country_code:ca
Context
Akira is a ransomware family known for encrypting files and demanding ransom payments primarily targeting organizations in financial services, healthcare, manufacturing, and technology sectors. It has been observed attacking enterprises in North America with its sophisticated encryption mechanisms.
Reports & references
- services.google.com — M Trends 2025 En (report)
- news.sophos.com — Cryptoguard An Asymmetric Approach To The Ransomware Battle (report)
- Kaspersky — 111483 (report)
- trellix.com — Akira Ransomware (report)
- blog.sekoia.io — Sekoia Io Mid 2023 Ransomware Threat Landscape (report)
- arcticwolf.com — Conti And Akira Chained Together (report)
- Microsoft — Automatic Disruption Of Human Operated Attacks Through Containment Of Compromised User Accounts (report)
- loginsoft.com — Akira Ransomware The Evolution Of A Major Threat (report)
- arcticwolf.com — Arctic Wolf Labs Observes Increased Fog And Akira Ransomware Activity Linked To Sonicwall Ssl Vpn (report)
- arcticwolf.com — Smash And Grab Aggressive Akira Campaign Targets Sonicwall Vpns (report)
- zensec.co.uk — Unmasking Akira The Ransomware Tactics You Cant Afford To Ignore (report)
- security-chu.com — Entidades Negociando Con El Grupo Akira Ransomware (report)
- thedfirreport.com — From Bing Search To Ransomware Bumblebee And Adaptixc2 Deliver Akira 2 (report)
- thedfirreport.com — From Bing Search To Ransomware Bumblebee And Adaptixc2 Deliver Akira (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Akira (report)
- github.com — Akira The Old New Style Crime En Aaron Jornet (report)
- decoded.avast.io — Decrypted Akira Ransomware (report)
- intrinsec.com — Akira Ransomware (report)
- trellix.com — Akira Ransomware (report)
- twitter.com — 1651972583615602694 (report)
- huntress.com — Dangers Of Storing Unencrypted Passwords (report)
- arcticwolf.com — Follow On Extortion Campaign Targeting Victims Of Akira And Royal Ransomware (report)
- news.sophos.com — Akira Ransomware Is Bringin 88 Back (report)
- databreaches.net — Negotiations With The Akira Ransomware Group An Ill Advised Approach (report)
- stairwell.com — Akira Pulling On The Chains Of Ransomware (report)