Akira _v2 — Malware Profile

Akira _v2 is a Rust-based variant of Akira ransomware that has been in use since at least 2024. Akira _v2 is designed to target VMware ESXi servers and includes a new command-line argument set and other expanded capabilities.

MITRE ATT&CK techniques (6)

• T1083 File and Directory Discovery
• T1480 Execution Guardrails
• T1486 Data Encrypted for Impact
• T1489 Service Stop
• T1543 Create or Modify System Process
• T1654 Log Enumeration

Attributed threat actors

• Akira

Read the full analysis on IntelFusions