Risk Letters

Trusselsaktør

Akira

TLP:CLEAR

Fakta

  • Også kendt som: GOLD SAHARA, PUNK SPIDER, Howling Scorpius, Storm-1567
  • Motiv: Økonomisk
  • Malware og værktøjer: AdFind, Advanced IP Scanner, Advanced Port Scanner, Akira, Akira _v2, AnyDesk, Bloodhound, churchill_driver.sys / fidget.sys, Cloudflared, consent.exe (msimg32.dll / wmsgapi.dll), CrackMapExec, DonPAPI
  • Teknikker (MITRE ATT&CK): Account Access Removal, Archive via Utility, Binary Padding, Data Encrypted for Impact, Disable or Modify Tools, Domain Trust Discovery, Exfiltration to Cloud Storage, External Remote Services, Financial Theft, Match Legitimate Resource Name or Location, PowerShell, Remote Access Tools
  • Senest set: 7. oktober 2026

Medlemmer får aktørens profil, de seneste hændelser og vores vurdering i dashboardet.

Få hele briefet

Data: NVD (public domain), CISA KEV, FIRST EPSS, MITRE ATT&CK, AlienVault OTX.