ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

akira

ransomware group · aka Akira, Akira_VP (Linux/VMware ESXi variant), HDK / 'How Daemons Kill' (reported rebrand of its Linux encryptor, 2024) · Unknown; believed to be Russian-speaking. Some researchers have speculated links to former Conti-affiliated operators (unconfirmed). · active since March 2023

activeAll mentions →RansomLook ↗
Victims · 7d
9flat
Victims · 30d
44active targets
Victims · 90d
86
All-time (tracked)
1.5Ksince 2023-04-29
Last post
09-17 17:39UTC
Estimated earnings
Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since.public reporting
Profile · glm-5.3-flash · updated

Akira is a ransomware and data-extortion group first observed in March 2023, known for double extortion and a dedicated leak site used to pressure non-paying victims. It primarily targets small and mid-sized organizations across multiple sectors in North America and Europe, gaining initial access through SSL VPNs and edge appliances (notably Cisco ASA/FTD and SonicWall) often without multi-factor authentication. The group operates both Windows and Linux/VMware ESXi encryptors (Akira_VP) and, per 2025 vendor reporting, has used Windows Safe Mode reboots and attempted EDR tampering to evade defenses. The FBI and CISA estimated roughly $42 million in ransom proceeds as of March 2024 (source: FBI/CISA joint advisory, 2024). The group remains active, with this dashboard tracking five new leak-site victims in the past seven days (last post 2026-09-09).

Tactics & tooling
  • Initial access via SSL VPNs/edge appliances lacking MFA; exploits Cisco ASA/FTD (CVE-2023-20269) and SonicWall SonicOS (CVE-2024-40766); 2025 reporting also links affiliates to SonicWall SSL VPN zero-day exploitation.
  • Double extortion: data exfiltration followed by encryption; leak-site shaming of non-payers.
  • Dual-platform encryptors: Windows locker plus Linux/VMware ESXi variant (Akira_VP).
  • Exfiltration using cloud storage and transfer tools, including MEGA (MEGAsync) and Rclone, per FBI/CISA reporting.
  • EDR evasion: rebooting hosts into Windows Safe Mode to bypass security tooling; at least one affiliate crashed systems while attempting EDR tampering (2025).
  • Reported abuse of Microsoft Intune to push ransomware during deployment (2025 vendor research).
  • Credential-based access: compromised credentials, brute forcing, and purchases from initial access brokers, per FBI/CISA advisory.
  • Post-access reconnaissance with network-scanning utilities (e.g., Advanced IP Scanner) before lateral movement.
Targeted sectors
ManufacturingProfessional/business servicesHealthcareEducationConstructionFinanceIT servicesBroadly targets SMBs and mid-market organizations across critical infrastructure
Notable public victims

Stanford University (claimed October 2023), Nissan Oceania (claimed December 2023), Recent dashboard-tracked leak-site victims (September 2026): Kyodo USA, Brentwood Country Club, CreateASoft, Brent Electric, Stransky Heiz-Mess-Regeltechnik GmbH

Estimated earnings

Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. — FBI/CISA joint cybersecurity advisory AA24-109A (published May 2024), citing ~$42 million in ransom proceeds as of March 2024.

Leak-site victims

VictimDiscoveredDetails
Dunlap Codding · Jul 25, 2025Dunlap Codding is a law firm, based in Oklahoma City, serves sophisticated international, national, and regional clients. We are ready to upload over 19 GB of corporate documents. Lots ofclient personal files, financial documents, project data, lots of patent documents, courts files, hearing notes, protocols, etc.
Helical Auto Technology (India) · Jul 25, 2025Helical Technology has been established for over 50 years and hasa global presence with production facilities in the UK, India and China. The company designs and manufactures springs, valve rotators, actuators and so on.We are ready to upload over 17 GB of corporate documents. Financial documents, HR files (employee docs), project data, NDAs, customer information, data of the UK departments, etc.
Donlar Construction · Jul 24, 2025Donlar Construction is a full-service construction organization that offers Minnesota and the Upper Midwest unparalleled service as a General Contractor & Construction Manager.We are ready to upload almost 50 GB of corporate documents. Employees personal information (DOB, address, phone, emails, medical information and so on), detailed financial data, project data, incident reports, NDAs, etc.
Testa Heck Testa & White · Jul 24, 2025Testa Heck Scrocca & Testa, P.A. is a Southern New Jersey law firm with over 90 years of combined experience and an outstanding record of success in the New Jersey Courts.We are ready to upload 87 GB of corporate documents. You will find a lot of personal information of their clients (DLs, birth\death certs and other documents), court documents, orders, correspondence and a lot of another legal documents.
Pilipili · Jul 24, 2025Pilipili is a full service partner in product design & engineering.We are ready to upload 9 GB of corporate documents. Lots of client data, contracts and agreements and so on.
OKA · Jul 24, 2025OKA offers an entire range of products for the home, including sofas, upholstered furniture, dining tables and chairs, curtains, storage, beds, headboards and linen, rugs, lighting and more.We are ready to upload 7 GB of corporate documents. Employee personal files, project data, client data, credit cards, detailed financial data, NDAs, contracts and agreements, etc.
Reimo · Jul 24, 2025REIMO is one of Europe's leading camper van manufacturers and accessories traders.We are ready to upload 53 GB of corporate documents. Employee personal information, project data, client data, financial data, NDAs, etc.
Pinnacle Woodwork · Jul 24, 2025Pinnacle Woodwork is a store fixture manufacturer located in Germantown, WI.We are ready to upload 24 GB of corporate documents. NDAs, clientdata, financial data, complete employee data (DOB, address, phones, family members contacts).
Sogedis · Jul 24, 2025Sogedis is a French company operating in the field of household appliances.We are ready to upload 10 GB of corporate documents. Client data,personal documents of employees, financial data, agreements withbig names as Siemens, Whirlpool, Samsung, Electrolux, Indesit, Bosch and so on.
Studio Associato Callatroni Bianchi · Jul 21, 2025STUDIO_C - IT Consulting and Services.We are going to upload company data soon. Accounting and financial data, client data, etc.
Polykar · Jul 19, 2025Polykar is an innovative manufacturer of sustainable flexible packaging solutions, offering products that are 100% recyclable or compostable.We are ready to upload 16 GB of corporate documents. Detailed financial data, client data, payment details, forms with personal information and so on.
LeasePLUS · Jul 19, 2025LeasePLUS is one of Australia’s leading providers of novated leasing solutions, focused on helping individuals save thousands through salary packaging for vehicles.We are ready to upload 6 GB of corporate documents. Personal files of more than 2300 people (customers and employees), NDAs, contracts and agreements, etc.
Souleret Engineering(LSSE) · Jul 19, 2025Lennon, Smith, Souleret Engineering, Inc. is a civil engineering and surveying company, serving various markets including municipal, commercial, industrial, residential, utilities, and energy sectors.We are ready to upload more than 14 GB of corporate documents. Lots of contracts and agreements, documents with personal information, project documents, financial files, etc.
Sib-Tryck Holding · Jul 19, 2025Sib Tryck is a firm that operates in digital printing. They provide anything from business cards to complex solutions such as customized packaging and delivery. We are going to upload 45 GB of corporate documents. Clients and employee information, project data, agreements, and so on.
Fayrefield Foods · Jul 19, 2025Fayrefield Foods specializes in the production and marketing of dairy products and powders throughout Europe, the Middle East, andNorth America.We are ready to upload more than 41 GB of essential corporate documents. Scans of almost all employees and other personal documents, detailed financial files, client information, NDAs, contracts and agreements, etc.
Multilift Logistic Group · Jul 19, 2025Multilift International specializes in port operations and terminal warehousing services, handling two million tons annually at their facilities. We are ready to upload more than 17 GB of essential corporate documents. Complete employee personal information (DOB, identification number, passport (scan) and so on), financial files, a lot of client data, a lot of contracts, etc.
GreenVest · Jul 19, 2025GreenVest is an environmental development and consulting firm, specializing in ecological restoration, mitigations services and sustainable land planning.We are ready to upload more than 7 GB of corporate documents. Financial data, projects, etc.
Goldberg & Osborne · Jul 19, 2025Goldberg & Osborne attorneys provide comprehensive legal servicesfor Plaintiff injury victims.We are ready to upload more than 150 GB of essential corporate documents. You will find personal docs of all their clients (more than 200 ppl), passports, medical records, DLs and so on, financial data, NDAs, court documents, protocols, etc.
Acetificio Andrea Milano · Jul 19, 2025Acetificio Andrea Milano is an Italian company with a long history in vinegar production.We are ready to upload more than 47 GB of essential corporate documents. Personal documents scans of company owners and other employee information, financial data, NDAs, customer information, etc.
Title XI · Jul 19, 2025Title XI Software Solutions is a software and support company supplying secure cloud based case management software as well as electronic discovery and litigation support to bankruptcy trustees, fiduciaries and professionals.We are ready to upload more than 50 GB of essential corporate documents. Huge amount of customer personal information (claims, financial statements, passport/DL/ssn scans and so on), employee information, financial data, court documents, NDAs, etc.
PEPRO · Jul 19, 2025PEPRO LLC is a leading manufacturer specializing in patented EMP EMI shielded enclosure systems tailored for mission-critical and remote communication applications.We are ready to upload more than 15 GB of essential corporate documents. Employee personal documents, customer information, accounting and financial data, agreements and contracts, NDAs, etc.
BAF Management Consulting · Jul 16, 2025BAF Management Consulting. The company provides consulting services.We are going to upload company data soon. They claim to process your data exclusively in accordance with applicable legal regulations but failed. Lots of client accounting and financial data, employee information, etc.
Studioc · Jul 16, 2025STUDIO_C - IT Consulting and Services.We are going to upload company data soon. Accounting and financial data, client data, etc.
Mazzoleni · Jul 16, 2025Mazzoleni Trafilerie Bergamasche is engaged in the drawing, heat treatment and coating of low, medium and high carbon steel wires.We are going to upload company data soon. Lots of agreements, detailed financial data, confidential files, etc.
The Colgin Companies · Jul 16, 2025Colgin offers authentic liquid smoke sauces, bringing the true Texas smokehouse flavor to its clients. The company provides eight bold flavors including hickory, mesquite, pecan, and apple.We are going to upload company data soon. Clients files, contracts, agreements and so on.
Genesis Billing Services · Jul 12, 2025Genesis Pathology Billing Service specializes in pathology billing, offering robust software solutions designed to optimize financial outcomes for pathology groups and labs.We are ready to upload 3 GB of corporate documents. Lots of clients financial files.
Wegley Higginbotham & Associates · Jul 12, 2025Wegley, Higginbotham & Associates PLC is a firm of certified public accountants dedicated to providing superior client service. They offer a variety of professional services and resources aimed at assisting their valued clients.We are ready to upload 8 GB of essential corporate documents. Clients and employees personal files, detailed financial data (payment details), NDAs, contracts and agreements, etc.
SPANN Roofing & Sheet Metal · Jul 12, 2025Spann Roofing & Sheet Metal is a provider of installation, maintenance and repair services for commercial, industrial, institutional and residential roofing systems in the eastern sections of North and South Carolina. We are going to upload data of this company. Complete data of allthe employees (DOB, SSN, address, phone, email, driver license and so on), agreements, detailed financial data, customer data, etc.
Tara Pac · Jul 12, 2025Tara Pac is the leading supplier of packaging for food, construction, chemistry and cosmetics in the Nordic region. We are ready to upload 6 GB of corporate data. Contacts, agreements, financial data, client data, a bit of employee data.
Wispone · Jul 12, 2025Wispone's goal is to interconnect broadband and ultra-wideband users regardless of geographic location, building a customer-centric service by overcoming both orographic and conventional circuit limitations. We are ready to upload more than 36 GB of essential corporate documents. Lots of client/employees IDs and passports scans, detailed financial data and numerous agreements, NDAs and so on.
Ace Wire Spring & Form · Jul 12, 2025Ace Wire Spring & Form Company, Inc. is a leading spring manufacturer of Compression Springs, Extension Springs, Torsion Springs and Wire Forms.We will soon upload corporate data of the company. Lots of employees (current and dismissed) files with personal information (address, DOB, SSN, passport), NDAs, detailed financial data, numerouscustomers contracts and agreements, completed medical forms and so on.
Stratascorp Technologies · Jul 12, 2025StratasCorp is a global provider of information technology services dedicated to meeting the federal government and defense sectorneeds for land, sea, air, and space missions. We will soon upload corporate data of the company. There are 200 scans of passports and drive licenses, other documents containing personal information, NDAs and other contracts and agreements.
Corinthian Media · Jul 4, 2025Corinthian Media is a service-driven, results-oriented media buying and planning company.We are ready to upload more than 7 GB of corporate documents. Detailed financial data, credit card scans, personal documents scans, medical information, NDAs, etc.
DKN Hotels · Jul 4, 2025DKN Hotels is a leading hotel and hospitality management company,offering comprehensive hotel management services.We are ready to upload more than 30 GB of corporate documents. Numerous financial files, confidentiality agreements, personal documents and other personal data (DOB, address, driver license and so on), lots of project docs, etc.
Watermark Marine Systems · Jul 4, 2025Watermark Marine Systems is a full-line marine contractor servingthe Lakes Region of New Hampshire since 1990. They offer a complete range of shorefront construction services with crews working year-round using mobile equipment to perform work on any of New Hampshire’s lakes or ponds.We are ready to upload more than 10 GB of corporate documents. Employee information, confidentiality agreement, financial information (audits, reports, invoices, so on), NDAs, etc.
Murex Petroleum · Jul 4, 2025Murex Petroleum Corporation is engaged in the acquisition, development and operation of oil and gas properties in North America.We are ready to upload 25 GB of documents. Lots of confidential documents, employee information (SSN, DOB, address, passport/SSN/DL scans), detailed financial information (reports, invoices, so on), NDAs, etc.
HRConnects, LLC · Jul 4, 2025HRConnects, LLC is a leading provider of human resource and staffing services.We are ready to upload 4 GB of documents. Employee information (SSN, DOB, address, passport/SSN/DL scans). Financial information (reports, invoices, so on), confidential docs, NDAs, etc.
Meleam S.p.A. · Jul 4, 2025Meleam S.p.A. offers a comprehensive range of services including risk assessment, training, health surveillance, and various certifications to ensure compliance with current regulations. We are ready to upload more than 12 GB of documents. Very detailed financial information (audits, reports, statements, payment details and so on), personal information of clients and employees, lots of contracts and agreements, confidential ones, etc.
Martin Showers Smith& McDonald · Jun 26, 2025Martin, Showers, Smith McDonald, LLC is a law firm specializing in civil litigation, trial law, personal injury, and family law.We are ready to upload more than 8 GB of documents. More than half of the data are scans of client personal documents (passports, SSNs, death/birth certificates, DLs and more), employee information, confidential documents, court reports.
Imblum Law Offices · Jun 26, 2025Imblum Law Offices PC specializes in bankruptcy law, offering services such as Chapter 7, Chapter 11, and Chapter 13 bankruptcy filing, as well as foreclosure defense and debt relief. We are ready to upload more than 20 GB of documents such as: client personal documents (passports, SSNs, death/birth certificates,financial information), court hearings, protocols, employee information, other confidential documents.
MultiStone · Jun 26, 2025MultiStone is the Low Country's leader in fabrication and installation of Natural and Engineered stone countertops. We are ready to upload more than 8 GB of documents such as: employee documents, financial data, lots of projects, confidentiality agreements, etc.
Studio Verna SocietàProfessionale · Jun 26, 2025Studio Verna Società Professionale offers integrated economic, tax and legal advice to businesses and third sector entities, with a highly personalized approach to the needs of the client and thesector in which it operates.We are ready to upload more than 7 GB of documents such as: financial data (audits, payment details, reports, invoices), client financial data, agreements, project information, employee information, etc.
Arbour Volkswagen · Jun 26, 2025Throughout the year your Arbour Volkswagen in Laval offers you a large choice of special offers, impressive rebates and unbeatablepromotions.We are ready to upload more than 4 GB of documents such as: confidential agreements containing clients personal information, detailed financial data (audits, payment details, reports, invoices), employee and partners information, etc.
Pennant Park · Jun 25, 2025PennantPark is an independent middle market credit provider specializing in targeted exposure to core middle market credit.We are ready to upload more than 6 GB of documents such as: employee documents (SSNs, IDs, passports, DLs, and so on), financial data, confidential reports, client data, etc.
VS Associates · Jun 24, 2025VS Associates empower their clients to achieve financial confidence and security through personalized wealth management, strategicfinancial planning, and expert investment advice.We are ready to upload more than 30 GB of documents such as: numerous docs containing personal client information (SSNs, DOB, emails, addresses, IDs, financial docs, birth/death certs and so on),financial corporate data (payment details, invoices), NDAs, etc.
Datrose · Jun 24, 2025Datrose, founded in is a business outsourcing company that offersdocument management, mail services, contact center solutions, accounts payable, and staffing services.We are ready to upload more than 5 GB of corporate documents suchas: confidentiality agreements, numerous docs containing personal employee information (SSNs, DOB, emails, address), financial data (payment details, invoices), NDAs, etc.
Integrity Mortgage · Jun 24, 2025Integrity Mortgage operates under the MAC 5 Mortgage umbrella andhas an A rating with the Better Business Bureau.We are ready to upload more than 8 GB of essential corporate documents such as: detailed personal client data (scans of passports,SSNs, DLs, credit cards and so on), detailed company financial data (audits, payment details, reports, invoices), correspondence,etc.
Keystone Shipping · Jun 24, 2025Keystone is a U.S. shipowner and operator founded in Philadelphiain 1909.We are ready to upload corporate documents such as: personal information of employees (DOB, phone, email and so on), detailed financial data (payment details, reports, invoices, salaries, bonuses), corporate NDAs, cargo ship blueprints, etc.
Access Financial · Jun 24, 2025Access Financial is the leading global provider of contract management, outsourced payroll and umbrella services.We are going to upload another 13 GB of corporate data. Confidential agreements, correspondence, personal documents of employees (passports, death\birth certificates, other hr files), financials (audits, payment details, reports), NDAs, etc.
Seppeler Gruppe · Jun 24, 2025Die Seppeler Gruppe is a group of internationally producing service companies..We are going to upload another 11 GB of corporate data. You will find employee personal information (DOB, address, identification numbers and so on), financial data, payment details, project dataand so on.

In the newsAll →

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .