Sandy

Security

Akira

<p>The cyber group Akira, born in 2023, targeted over 250 organizations, extracting nearly $42 million in illegal ransomware cashflows, which are now alerted to the top global <a href="https://www.cryptopolitan.com/it-and-security-professionals-embrace-ai/" rel="noopener noreferrer nofollow">cybersecurity</a> agencies.</p>
<h2 class="wp-block-heading" id="akira-s-global-reach-and-impact">Akira’s global reach and impact</h2>
<p>Investigations conducted by the U.S Federal Bureau of Investigation (FBI) revealed as of March 2023, the candidate is targeting business and critical infrastructure entities in North America, Europe, and Australia. However, at the time, ransomware on Windows, which was mainly used, was detected only by the FBI. Later, a variant that works on the Linux system was also discovered.</p>
<p>In their joint <a href="https://www.ic3.gov/Media/News/2024/240418.pdf" rel="noopener noreferrer nofollow" target="_blank">effort</a>, the FBI, in conjunction with NCSICA (Cybersecurity and Infrastructure Security Agency), EC3(European Cybercrime Centre in Europol), and NCSC-NL(Netherlands’ National Cyber Security Center), published a cybersecurity advisory to “get the word out” to the large public.</p>
<p>According to the note, Akira is given initial access via previously installed VPNs without multifactor authentication (MFA). The ransomware then extracts the credentials and other sensitive data, locks the systems, and displays ransom notes. The ransomware group demands payment in Bitcoin.</p>
<h2 class="wp-block-heading" id="continued-vigilance">Continued vigilance</h2>
<p>The community, including the local businesses that Hurricane Sandy also hit, is working towards recovery. Such malware often disables security software after initial access to avoid detection. Some of the threat mitigation techniques recommended in the advisory are implementing a recovery plan and MFA, filtering network traffic, disabling unused ports and hyperlinks, and system-wide encryption.</p>
<p>The FBI, CISA, EC3, and NCSC-NL recommend continually testing your security program at scale in a production environment to ensure optimal performance against the MITRE ATT&amp;CK techniques identified in this advisory. The FBI, CISA, NCSC, and the U.S. National Security Agency (NSA) previously issued alerts about malware targeting crypto wallets and exchanges. The report noted that some of the data extracted by the malware included data within the directories of the Binance and Coinbase exchange applications and the Trust Wallet application.</p>

Cybersecurity agencies unite against Akira ransomware threat

Table of Contents

Cryptopolitan_News

Other articles published on Apr 19, 2024

Shiba Inu Holders Warned of Fake BONE Airdrop Phishing Scams

Bitcoin: Expect The Unexpected – Analyst Sees Unconventional Bull Run Post-Halving

Meme Coin Mania: Which Will Rebound with 50X Gains First?

Bitcoin Whales Make Massive Move as Bitcoin Price Surges to $65K – Are Bulls Back?

Safe Acquires Multis: Strategic initiation to Elevate Cryptocoin treasury management

The Next Dogecoin, Pepe, or Shiba Inu? This Altcoin Could Make More Than 5000% ROI in 2024

Join our free newsletter for daily crypto updates!