Akira Ransomware

Facts for Prelims

Akira Ransomware

News: IT has been in news recently.

What is it?
• Akira is a recently emerged ransomware operation that is active in cyberspace. It targets both Windows and Linux-based systems.
• This group first steals information from the victims, then encrypts data on their systems and conducts double extortion (ransomware strategy) to force the victim into paying the ransom.
• In case the victim does not pay, they release their victim’s data on their dark web blog.
• The ransomware is designed to encrypt data, create a ransomware note and delete Windows Shadow Volume copies on affected devices.
• The ransomware gets its name due to its ability to modify filenames of all encrypted files by appending them with the “.akira” extension.