United

Bitcoin

Security

Akira

Akira, a year-old ransomware group, breached more than 250 organizations and extracted approximately $42 million in ransomware proceeds, top global cybersecurity agencies alerted.
Investigations conducted by the United States Federal Bureau of Investigation (FBI) found that Akira ransomware has been targeting businesses and critical infrastructure entities in North America, Europe and Australia since March 2023. While the ransomware initially targeted Windows systems, the FBI recently found Akira’s Linux variant as well.
The FBI, along with Cybersecurity and Infrastructure Security Agency (CISA), Europol’s European Cybercrime Centre (EC3) and the Netherlands’ National Cyber Security Centre (NCSC-NL), released a joint cybersecurity <a href="https://www.ic3.gov/Media/News/2024/240418.pdf" target="_blank" rel="noopener nofollow">advisory</a> (CSA) to “disseminate” the threat to masses.
According to the advisory, Akira gains initial access through pre-installed virtual private networks (VPNs) that lack multifactor authentication (MFA). The ransomware then proceeds to extract credentials and other sensitive information before locking up the system and displaying a ransom note.
<blockquote data-ct-non-breakable="true">
 “Akira threat actors do not leave an initial ransom demand or payment instructions on compromised networks, and do not relay this information until contacted by the victim.”
</blockquote>
The ransomware group demands payments in Bitcoin (<a href="https://cointelegraph.com/bitcoin-price">BTC</a>) from the victim organizations to restore access. Such malware often disables security software after initial access to avoid detection.
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-04/170696d6-1aaa-49c5-b02f-818cfd49f93d.png" alt="" title="">
 <figcaption style="text-align: center;">
 Cybersecurity best practices against ransomware attacks. Source:&nbsp;cisa.gov
 </figcaption>
</figure>
Some of the threat mitigation techniques recommended in the advisory are&nbsp;implementing a recovery plan and MFA,&nbsp;filtering network traffic, disabling unused ports and hyperlinks and system-wide encryption.
“The FBI, CISA, EC3, and NCSC-NL recommend continually testing your security program, at scale, in a production environment to ensure optimal performance against the MITRE ATT&amp;CK techniques identified in this advisory,” the agencies concluded.
Related: <a href="https://cointelegraph.com/news/mystery-malware-drains-video-game-cheaters-bitcoin">Mystery malware targets Call of Duty cheaters, stealing their Bitcoin</a>
The FBI, CISA, NCSC and the U.S. National Security Agency (NSA) previously issued alerts about malware that was being used to target crypto wallets and exchanges. 
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-04/d603b6d4-2230-4bd8-bd4f-ccffcdcd5fda.png" alt="" title="">
 <figcaption style="text-align: center;">
 Directories where information were extracted by the malware. Source: National Cyber Security Centre
 </figcaption>
</figure>
The report noted that some of the data extracted by the malware included data within the directories of the Binance and Coinbase exchange applications and the Trust Wallet application. According to the report, every file in the directories listed is being exfiltrated regardless of type. 
Magazine: <a href="https://cointelegraph.com/magazine/get-bitcoin-or-die-tryin-why-hip-hop-stars-love-crypto/">Get Bitcoin or die tryin’: Why hip hop stars love crypto</a>

Bitcoin ransomware Akira drains $42M from more than 250 companies: FBI

Cointelegraph

Other articles published on Apr 19, 2024

Shiba Inu Holders Warned of Fake BONE Airdrop Phishing Scams

Binance gears up for major upgrade: What you need to know

Telos Partners with Ponos Technology to Develop Hardware-Accelerated Ethereum L2 zkEVM Network (1...

XRP Price Prediction for April 19

Bitcoin Halving Not Equivalent to Stock Split; Apple Yields to China's Security Demands - Top Hea...

Raffle Coin’s Robust Presale Strategy Attracts Avalanche & Filecoin Backers Eyeing a Lucrative 25...

Join our free newsletter for daily crypto updates!