akira
ransomware group · aka Akira, Akira_VP (Linux/VMware ESXi variant), HDK / 'How Daemons Kill' (reported rebrand of its Linux encryptor, 2024) · Unknown; believed to be Russian-speaking. Some researchers have speculated links to former Conti-affiliated operators (unconfirmed). · active since March 2023
Victims · 7d
9flat
Victims · 30d
43active targets
Victims · 90d
86
All-time (tracked)
1.5Ksince 2023-04-29
Last post
09-17 17:39UTC
Estimated earnings
Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since.public reporting
Profile · glm-5.3-flash · updated
Akira is a ransomware and data-extortion group first observed in March 2023, known for double extortion and a dedicated leak site used to pressure non-paying victims. It primarily targets small and mid-sized organizations across multiple sectors in North America and Europe, gaining initial access through SSL VPNs and edge appliances (notably Cisco ASA/FTD and SonicWall) often without multi-factor authentication. The group operates both Windows and Linux/VMware ESXi encryptors (Akira_VP) and, per 2025 vendor reporting, has used Windows Safe Mode reboots and attempted EDR tampering to evade defenses. The FBI and CISA estimated roughly $42 million in ransom proceeds as of March 2024 (source: FBI/CISA joint advisory, 2024). The group remains active, with this dashboard tracking five new leak-site victims in the past seven days (last post 2026-09-09).
Tactics & tooling
- Initial access via SSL VPNs/edge appliances lacking MFA; exploits Cisco ASA/FTD (CVE-2023-20269) and SonicWall SonicOS (CVE-2024-40766); 2025 reporting also links affiliates to SonicWall SSL VPN zero-day exploitation.
- Double extortion: data exfiltration followed by encryption; leak-site shaming of non-payers.
- Dual-platform encryptors: Windows locker plus Linux/VMware ESXi variant (Akira_VP).
- Exfiltration using cloud storage and transfer tools, including MEGA (MEGAsync) and Rclone, per FBI/CISA reporting.
- EDR evasion: rebooting hosts into Windows Safe Mode to bypass security tooling; at least one affiliate crashed systems while attempting EDR tampering (2025).
- Reported abuse of Microsoft Intune to push ransomware during deployment (2025 vendor research).
- Credential-based access: compromised credentials, brute forcing, and purchases from initial access brokers, per FBI/CISA advisory.
- Post-access reconnaissance with network-scanning utilities (e.g., Advanced IP Scanner) before lateral movement.
Targeted sectors
ManufacturingProfessional/business servicesHealthcareEducationConstructionFinanceIT servicesBroadly targets SMBs and mid-market organizations across critical infrastructure
Notable public victims
Stanford University (claimed October 2023), Nissan Oceania (claimed December 2023), Recent dashboard-tracked leak-site victims (September 2026): Kyodo USA, Brentwood Country Club, CreateASoft, Brent Electric, Stransky Heiz-Mess-Regeltechnik GmbH
Estimated earnings
Approximately $42 million in ransom proceeds as of March 2024; no comprehensive public estimate since. — FBI/CISA joint cybersecurity advisory AA24-109A (published May 2024), citing ~$42 million in ransom proceeds as of March 2024.
Leak-site victims1,494 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| Decore-Ative Specialties | · Feb 18, 2025 | Lean manufacturer of custom cabinet components for the kitchen, bath, closet, garage, and home organization industries.We are ready to upload more than 8 GB of essential corporate documents such as: NDA’s, confidential licenses, agreements and contracts, financial data (audits, payment details, reports), medical documents, contact numbers and e-mail addresses of employees and customers, etc. |
| Daniels Homes | · Feb 18, 2025 | Daniels Homes provides remodeling and renovation services with the same level of care and attention to detail as in building a newhome. We are ready to upload more than 60 GB of essentials corporate documents such as: contact numbers and e-mail addresses of employees and customers, financial data (audits, payment details, reports), confidential licenses, agreements and contracts, etc. |
| PREMIER HOUSEWARES LIMITED | · Feb 18, 2025 | Wholesaler supplying trade buyers with on-trend home lifestyle products, luxury furniture and quality kitchenware.We are ready to upload more than 110 GB of essential corporate documents such as: contact numbers and e-mail addresses of employees and customers, financial data (audits, payment details, reports), confidential licenses, agreements and contracts, etc. |
| Thong Sia | · Feb 17, 2025 | THONG SIA GROUP, a member of STELUX Group of Companies, is also the sole distributor of Seiko watches, Seiko clocks, Lorus clocks,Alba watches, Wired watches and Seiko special time equipment in Hong Kong, Malaysia, Brunei, Singapore and Macau.We are ready to upload a lot of sensitive corporate documents such as: financial data (audits, payment details, reports), passports and other employee and customer documents, contact numbers and e-mail addresses of employees and customers, etc. |
| Woman's Athletic Club of Chicago | · Feb 17, 2025 | Woman's Athletic Club of Chicago is a private women's club residing in a historical landmark building on Michigan Avenue and the country's first women's athletic club.We are ready to upload some essential corporate documents such as: confidential licenses, agreements and contracts, financial data(audits, payment details, reports), internal correspondences, HRdocuments, contact numbers and e-mail addresses of employees andcustomers, etc. |
| P.N. Sakkoulas | · Feb 17, 2025 | P.N. Sakkoulas publishes law books and the journals "Criminal Chronicles" and "Chronicles of Private Law".We are ready to upload a lot of essential corporate documents such as: contact numbers and e-mail addresses of employees and customers, financial data (audits, payment details, reports), confidential licenses, agreements and contracts, etc. |
| DA Capital | · Feb 17, 2025 | DA Capital LLC is a global investment manager specializing in credit and special situations.We are ready to upload a lot of sensitive corporate documents such as: NDA’s, employee credit cards, confidential licenses, agreements and contracts, employee medical cards, insurance documents, passports and visas, tax information, driver licenses, contact numbers and e-mail addresses of employees and customers, etc. |
| COSMED | · Feb 17, 2025 | COSMED is a privately owned company manufacturing Cardio Pulmonary, Metabolic and Body Composition diagnostic equipment. We are ready to upload more than 25 GB of essential corporate documents such as: passport scans, NDAs, confidential files, financial data (audits, payment details, reports), foreigner identity cards, etc. |
| Primaveras | · Feb 14, 2025 | Primaveras has its own complete structure to take care of everything in the event of a death. It consists of two cemeteries, funeral homes, wakes, crematorium, columbarium, ashes storage area, funeral assistance plan and support services for the bereaved.We are ready to upload more than 11 GB of essential corporate documents such as: passport scans, contact numbers and e-mail addresses of employees and customers, financial data (audits, payment details, reports), foreigner identity cards, etc. |
| Nelson & Townsend, CPA's | · Feb 14, 2025 | Nelson & Townsend, CPA's perform tax returns for individuals and businesses, accounting services (payroll services, bookkeeping), and business/client support.We are ready to upload a lot of essentials corporate documents such as: driver licenses, financial data (audits, payment details, reports), contact numbers and e-mail addresses of employees and customers, etc. |
| Castle Rock Construction Company | · Feb 14, 2025 | Castle Rock Roofing & Restoration will provide you with an honestevaluation of your property with no strings attached. If damage is present, Castle Rock Roofing will guide you step by step through the claim process.We are ready to upload more than 16 GB of sensitive corporate documents such as: NDA’s, driver licenses, health insurance documents, SSN’s, contact numbers and e-mail addresses of employees and customers, internal financial documents, etc. |
| Genus | · Feb 14, 2025 | Genus is the most comprehensive low-code application development platform to rapidly build and continuously improve enterprise applications. We are ready to upload some of essentials corporate documents such as: NDA’s, contact numbers and e-mail addresses of employees and customers, financial data (audits, payment details, reports), etc. |
| Window World of Raleigh | · Feb 14, 2025 | Window World® is America's Exterior Remodeler, offering quality windows, doors, siding, shutters, and more, with over 200 locations nationwide.We are ready to upload some of essential corporate documents suchas: NDA with employees and clients, medical insurance documents, contact numbers and e-mail addresses of employees and customers, financial data (audits, payment details, reports), etc. |
| Go Strictly | · Feb 14, 2025 | Go Strictly goal to help each of our customers make the most of their IT environments; whether managing and modernizing their current systems or helping them incorporate new technologies.We are ready to upload some essentials corporate documents such as: financial data (audits, payment details, reports), confidential licenses, agreements and contracts, HR documents, contact numbers and e-mail addresses of employees and customers, etc. |
| Regency Media | · Feb 14, 2025 | Regency Media, with a rich history spanning over 40 years, was once a leader in manufacturing optical discs, VHS, and audio cassettes for Australia's top film entertainment and recorded music companies, as well as independent distributors.We are ready to upload more than 16 GB of essential corporate data such as: NDA’s, driver licenses, passports, contact numbers ande-mail addresses of employees and customers, financial data (audits, payment details, reports), etc. |
| CoMo-Industrial Engineering | · Feb 13, 2025 | CoMo Industrial Engineering offers a comprehensive range of industrial engineering services. From precise piping design and flexibility analysis to strength calculations for pressure vessels and storage tanks. We are ready to upload more than 17 GB of essential corporate documents such as: financial data (audits, payment details, reports), contact numbers and e-mail addresses of employees and customers, etc. |
| Elite Advanced LaserCorporation | · Feb 13, 2025 | Elite Advanced Laser Corporation (eLASER ), headquartered in Chung Ho Dist, New Taipei City, Taiwan, is a EMS (Electronic Manufacturing Service) service of advanced optoelectronic and RF component for information , optical and RF communication.We are ready to upload more than 90 GB of essential corporate documents such as: many NDA’s, financial data (audits, payment details, reports), confidential licenses, agreements and contracts, contact numbers and e-mail addresses of employees and customers, etc. |
| Vicky Foods | · Feb 12, 2025 | Vicky Foods Company have an egg factory in Terrateig, a plastic film packaging factory in La Pobla del Duc and a factory that produces and packages dried fruits and nuts in Las Palmas.We are ready to upload more than 10 GB of sensitive corporate documents such as: contact numbers and e-mail addresses of employeesand customers, DNI numbers, personal signatures, financial data (audits, payment details, reports), confidential licenses, agreements and contracts, etc. |
| Wakefield & Associates | · Feb 12, 2025 | Wakefield & Associates is a financial services company that specializes in debt collection and billing services.We are ready to upload more than 13 GB of sensitive private corporate documents such as: SSNs, passport numbers, confidential licenses, agreements and contracts, financial data (audits, payment details, reports), contact numbers and e-mail addresses of employees and customers, medical insurance documents, internal correspondences, medicare numbers, etc. |
| Prime Trust Financial | · Feb 12, 2025 | Prime Trust Financial offers a range of financial services including bill payment, cambio, financing, gift cards, and send/receivemoney. Their services cater to individuals looking to pay bills,shop gift cards, exchange currency, and obtain micro-financing loans. We are ready to upload more than 68 GB of sensitive corporate documents such as: driver licenses, passports, contact numbers and e-mail addresses of employees and customers, financial data (audits, payment details, reports), confidential licenses, agreements and contracts, etc. |
| Allen & Pinnix | · Feb 10, 2025 | Allen & Pinnix, P.A. is a leading North Carolina-based law firm, serving clients around the world for over thirty-five years. We are ready to upload more than 29 GB of private corporate documents such as: NDAs, medical documents, contact numbers and e-mail addresses of employees and customers, birth certificate’s, driver licenses, passports, etc. |
| The Pawn | · Feb 10, 2025 | The Pawn is a company that operates in the Banking industry.We are ready to upload some essential corporate documents such as: contact numbers and e-mail addresses of employees and customers, financial data (audits, payment details, reports), confidentiallicenses, agreements and contracts, etc. |
| Old National Events Plaza | · Feb 10, 2025 | The impressive 280,000 square-foot, state-of-the-art facility, offers affordable, flexible space and in-house services to make theplanning and coordinating of your event a breeze.We are ready to upload a lot of sensitive corporate documents such as: confidential licenses, agreements and contracts, financial data (audits, payment details, reports), contact numbers and e-mail addresses of employees and customers, etc. |
| Tropical Foods Company Inc | · Feb 7, 2025 | Tropical Foods specializes in premium raw and freshly roasted nuts and seeds, dried fruit, snack mixes, bulk & packaged candies, spices and specialty foods.We are ready to upload more than 56 GB of sensitive corporate documents such as: contact numbers and e-mail addresses of employeesand customers, financial data (audits, payment details, reports), confidential licenses, agreements and contracts, etc. |
| Presence From Innovation (PFI) | · Feb 7, 2025 | Manufacturer and Distributor of Custom Retail Store Displays and Fixtures made of Plastic, Wood, Metal, or Wire.We are ready to upload more than 13 GB of sensitive corporate documents such as: confidential agreements and contracts, driver license numbers, HR documents, contact numbers and e-mail addresses of employees and customers, financial data (audits, payment details, reports), etc. |
| NG-BLU Networks | · Feb 6, 2025 | NGBLU provides partners with unique, innovative and infrastructure-independent telecommunications and data services.Because the company refused to negotiate in any way, you will be able to find a lot of sensitive corporate documents such as: contact numbers and e-mail addresses ofemployees and customers, financial data (audits, payment details, reports), confidential agreements and contracts, employee BSN and passport numbers and scans, etc.We have made the process of downloading company data assimple as possible for our users. All you need is any torrent client (like Vuze, Utorrent, qBittorrent or Transmission to use magnet links). You will find the torrent file above.1. Open uTorrent, or any another torrent client.2. Add torrent file or paste the magnet URL to upload the data safely.3. Archives have no password |
| Taking stock of 2024| Part 2 | · Feb 4, 2025 | Our team was able to breach the IT defenses of a huge number of companies over the past year. Among them are:| intercomp.com.mt | saludsa.com.ec | 360energy.com.ar | directex.net | mbacomputer.com | armellini.com | cfctech.com | elitt-sas.fr | viscira.com | westernwoodsinc.com | alfa.com.co | easycom.com | dwgp.com | summitmovinghouston.com | jsfrental.com | milleraa.com | stewartautosales.com | feheq.com | usm-americas.com | mipal.com.br | acesaz.com | premierop.com | alphascriptrx.com | emin.cl | engineeredequip.com | mielectric.com.br | We always act honestly and try not to disclose the fact of data leakage until the very last moment. Therefore, it is in your best interest not to beon this list and contact us immediately. |
| Taking stock of 2024| Part 1 | · Jan 31, 2025 | Our team was able to breach the IT defenses of a huge number of companies over the past year. Among them are:| worldfabricinc.com | JFGV.ca | atlanticelectrics.com | cannara.ca | njcar.org | yhti.com | dkgrar.com | calfaucets.com | atr.com| simcointeriors.com | madisonforms.com | scrantonrealtors.org |isisecurity.com | sgbllp.com | ad.snadc.com | clarkpower.com | allbrightcotton.com | idrefjall.com | swissit.cz | irisib.com | foxconstructiongroup.co.uk | elf.uk.com | farmatodo.com | omniflow.com | rqsi.com | teligentems.com | centerracoop.com | andrewlauren.com | garcesfruit.com | ibp.com | empereon-constar.com | rightofwayequipment.net | adhydraclean.com | vanguardpaints.com |We always act honestly and try not to disclose the fact of data leakage until the very last moment. Therefore, it is in your best interest not to be on this list and contact us immediately. |
| Perfect Plastic | · Jan 30, 2025 | A world leader in payment card production. Innovative solutions in contactless, EMV, chip cards, and personalization. We are ready to upload a lot of private corporate documents such as: confidential agreements and contracts, driver licenses, financial data (audits, payment details, reports), contact numbers ande-mail addresses of employees and customers, etc. |
| Benuta | · Jan 30, 2025 | In just twelve years, Benuta has become one of the fastest growing companies in the European online carpet retail sector.We are ready to upload a lot of private corporate documents such as: NDAs, contact numbers and e-mail addresses of employees and customers, financial data (audits, payment details, reports), confidential agreements and contracts, inside correspondence, HR documents, etc. |
| Menway | · Jan 30, 2025 | Menway offers a wide range of skills to provide a tailor-made response to all HR issues, serving businesses and employees.We are ready to upload more than 20 GB of private corporate documents such as: NDAs, HR documents, contact numbers and e-mail addresses of employees and customers, financial data (audits, paymentdetails, reports), etc. |
| QCN CO., LTD | · Jan 28, 2025 | The company provides numerous consulting services and develops systems and applications. Based on the accumulated technology and experience, QCN has been opening new business lines since 2010 under two mottos: mobile solutions and overseas cooperation projects.We are ready to upload more than 12 GB of private corporate documents such as: contact numbers and e-mail addresses of employees and customers, financial data (audits, payment details, reports), confidential agreements and contracts, etc. |
| Mercy Supply Collaborative | · Jan 28, 2025 | Mercy is a diversified, privately held healthcare services organization, focused on positioning itself to meet the challenges of an increasingly complex healthcare environment.We are ready to upload a lot of private corporate documents such as: financial data (audits, payment details, reports), contact numbers and e-mail addresses of employees and customers, etc. |
| Grand Fire Protection | · Jan 27, 2025 | Grand Fire provides first-class fire protection and underground utility services in Nashville and Middle Tennessee.We are ready to upload a lot of private corporate documents such as: license agreements, financial data (audits, payment details, reports), contact numbers and e-mail addresses of employees and customers, SSNs, family member information, incident with compensation reports, etc. |
| Mark Resolve Inc | · Jan 27, 2025 | This organization primarily operates in the Business Consulting, nec business / industry within the Engineering, Accounting, Research, and Management Services sector.We are ready to upload more than 13 GB of private corporate documents such as: driver licenses, internal financial documents, inside corporate correspondence, customer contact emails and phones, etc |
| WorldNet Telecommunications LLC | · Jan 23, 2025 | WorldNet stands out for offering services to companies with a full range of technology solutions, including digital security, IT consulting, voice, data, cloud services, broadband Internet, satellite telephony and business continuity.We are ready to upload more than 8 GB of private corporate documents such as: license agreements, NDAs, internal financial data (audits, payment details, reports), insurance documents, customer contact emails and phones, etc. |
| Enghouse (ex. Navita) | · Jan 23, 2025 | Enghouse is a publicly traded Canadian company that provides enterprise software solutions focused on remote work, visual computing, and communications for next-generation software-defined networks.We are ready to upload some private corporate documents such as: internal financial data (audits, payment details, reports), employee tax payer numbers, employee contact emails, etc. |
| Architects West | · Jan 22, 2025 | Architects West is a leading architecture firm based in Coeur dAlene and Spokane, offering architectural, landscape architectural,and interior design services since 1973.We are ready to upload more than 120 GB of private corporate documents such as: HR documents, contact numbers and e-mail addressesof employees and customers, confidential agreements and contracts, financial data (audits, payment details, reports), etc. |
| Hayloft Property Management | · Jan 22, 2025 | Hayloft Property Management Co. offers spacious, modern living, where quality and comfort come first. Their apartments for rent are located in five states, with nine different communities: South Dakota, Iowa, Minnesota, Nebraska, and Kansas.We are ready to upload about 9 GB of private corporate documents such as: license agreements, contact numbers and e-mail addressesof employees and customers, SSNs, internal financial documents, incident reports, etc. |
| Divimast | · Jan 17, 2025 | Divimast is a business consulting company that brings together consultants who have been in the market for more than 20 years, highly specialized and ready to offer customized solutions for each client.We are ready to upload about 8 GB of private corporate documents such as: confidential agreements, internal financial documents, employee passports (identity cards), HR documents, contact numbersand e-mail addresses of employees and customers, etc. |
| VODOTEHNIKA D.D. | · Jan 17, 2025 | Vodotehnika provides quality design, production and retail of home equipment and decor as well as support services.We are ready to upload some private corporate documents such as: internal financial documents, contact numbers and e-mail addresses of employees and customers, passports (identity cards), etc. |
| Vodotechnika | · Jan 17, 2025 | The main activity of the company is the construction and design of pipeline systems from source to consumer, including the treatment of drinking, process and waste water and the construction of plumbing and installation complexes.We are ready to upload some private corporate documents such as: internal financial documents, contact numbers and e-mail addresses of employees and customers, passports (identity cards), etc. |
| Beyond79 | · Jan 14, 2025 | — |
| Moinho Globo Alimentos | · Jan 14, 2025 | — |
| PJ's Rebar | · Jan 14, 2025 | — |
| Union Studio | · Jan 14, 2025 | — |
| Peikko | · Jan 11, 2025 | — |
| Ichikawa North America Corporation | · Jan 11, 2025 | — |
| Thomas J. Henry Law | · Jan 11, 2025 | — |
| Capesesp | · Jan 11, 2025 | — |
In the newsAll →
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .