MITRE ATT&CKsoftware (malware)

S1194 Akira _v2

Published 2025-01-09 Modified 2025-03-11 Official page ↗

Domain: enterprise
Version: 1.0
Created: 2025-01-09

Description

Akira _v2 is a Rust-based variant of Akira ransomware that has been in use since at least 2024. Akira _v2 is designed to target VMware ESXi servers and includes a new command-line argument set and other expanded capabilities.

Uses · MITRE ATT&CK (6)

T1654 Log Enumeration technique
T1543 Create or Modify System Process technique
T1489 Service Stop technique
T1486 Data Encrypted for Impact technique
T1480 Execution Guardrails technique
T1083 File and Directory Discovery technique

Referenced by MITRE ATT&CK · uses (1)

G1024 Akira group

References

https://www.cisa.gov/sites/default/files/2024-04/aa24-109a-stopransomware-akira-ransomware_2.pdf CISA Akira Ransomware APR 2024
https://blog.talosintelligence.com/akira-ransomware-continues-to-evolve/ Cisco Akira Ransomware OCT 2024
https://unit42.paloaltonetworks.com/threat-assessment-howling-scorpius-akira-ransomware/ Palo Alto Howling Scorpius DEC 2024

S1194 Akira _v2

Description

Related

Uses · MITRE ATT&CK (6)

Referenced by MITRE ATT&CK · uses (1)

References