Akira (Linux/ESXi) (48f864a6-724e-4dbc-8428-981670bcd07a)
Variants of Akira ransomware targeting Linux and ESXi systems have been observed since at least mid-2023.[Cyble September 21 2023] The Akira Linux/ESXi variant Technique relationships highlighted here mainly derive from reporting focused on samples written in C++, although a Rust-based variant, often referred to as "Akira_v2", has also been observed.[Cyble September 21 2023][Unit 42 December 2 2024][U.S. CISA Akira April 18 2024]
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Akira (923f478c-7ad1-516f-986d-61f96b9c553e) | Tidal Groups | Akira (Linux/ESXi) (48f864a6-724e-4dbc-8428-981670bcd07a) | Tidal Software | 1 |