What other aliases and vendor names is Akira known by?

Akira is tracked across the cybersecurity industry by multiple aliases, including: Darter, G1024, GOLD SAHARA, Howling Scorpius, PUNK SPIDER, REDBIKE, Storm-1567, White Lilith.

What are the primary motivations and sponsors of Akira?

Akira operates from Russia with primary motivation categorized as financial gain, sponsored or affiliated with Criminal Syndicate.

What vulnerabilities and CVEs does Akira actively exploit?

Akira has been observed weaponizing vulnerabilities including CVE-2024-40766, CVE-2026-50656.

Akira

ACTIVE CAMPAIGN TRACKED ⚠ Critical Threat Russia

Primary Aliases: PUNK SPIDER Darter G1024 GOLD SAHARA

Sponsor / State Affiliation Criminal Syndicate

Primary Motivation financial gain

Confidence Rating 95% (Grounded)

SonicWall SSL VPN Campaign, LATAM Airline Targeting, Hypervisor Expansion Campaign

⚔️ Weaponized CVE Matrix (2)

CVE-2024-40766

Weaponized Vulnerability

CVSS 8.5 KEV EPSS 85.0%

CVE-2026-50656

Weaponized Vulnerability

CVSS 8.5 KEV EPSS 85.0%

🎯 Target Sectors & Focus

Manufacturing Education Healthcare Financial Services Technology Professional Services Critical Infrastructure Aviation Food and Agriculture

🛡️ MITRE ATT&CK® Attack Lifecycle (8 TTPs)

📥 Download Navigator JSON

Initial Access 1

T1566 Credential Abuse (Brute Force, Phishing, IAB purchases)

↗

Execution 1

T1059 Living-off-the-Land (PowerShell, WMI, AnyDesk, LogMeIn)

↗

Command & Control 1

T1071 Double Extortion (Exfiltration before Encryption)

↗

Exfiltration & Impact 1

T1485 Ransomware-as-a-Service (RaaS)

↗

Operational Techniques 4

T1000 Exploitation of Edge Device Vulnerabilities (Cisco, SonicWall, Veeam)

↗

T1000 Cross-Platform Encryption (Windows, Linux, VMware ESXi, Nutanix AHV)

↗

T1000 Rust-based Malware Payloads (Akira_v2, Megazord)

↗

T1000 MFA Bypass/Targeting of Non-MFA Accounts

↗

📰 Verified Campaigns & Intelligence Archive

🔔 Subscribe to Alerts

[DEEP DIVE] Akira Ransomware: Neutralizing Microsoft Defender and Huntress via BCDEDIT and Safe Mode

Attacks and Vulnerabilities 2026-08-17

[DEEP DIVE] The Rust Paradox: Memory-Safe Defense vs. Evasive Offensive Weaponization

Attacks and Vulnerabilities 2026-08-22

[DEEP DIVE] Microsoft Defender: RoguePlanet Zero-Day CVE-2026-50656 and Woodgnat Exploitation

Attacks and Vulnerabilities 2026-07-01

[DEEP DIVE] Akira Ransomware Breach: Sunrise Company and Associated Luxury Entities

Attacks and Vulnerabilities 2026-05-29

Copied to clipboard

LINK COPIED TO CLIPBOARD

Akira

⚔️ Weaponized CVE Matrix (2)

🎯 Target Sectors & Focus

🛡️ MITRE ATT&CK® Attack Lifecycle (8 TTPs)

📰 Verified Campaigns & Intelligence Archive

SHARE INTELLIGENCE WIRE