Unraveling Akira Ransomware
Akira ransomware is a new strain of ransomware that emerged in April 2023 and has already impacted over 15 publicly disclosed victims, with the majority located in the United States. The ransomware exfiltrates and encrypts data using a double-extortion technique, threatening to sell or leak the stolen data on the dark web if the ransom is not paid for decrypting the data. The malware uses the RSA and AES encryption algorithms and comes with a fixed hardcoded base64 encoded public key. The ransomware utilizes a PowerShell command to execute a WMI query that deletes the shadow copy, preventing system restoration. Malware: Akira [View Article](https://blog.cyble.com/2023/05/10/unraveling-akira-ransomware/)