Akira Ransomware Attack (CVE-2023-20269 and CVE-2020-3259)

What is the Akira Ransomware Attack?

The Akira ransomware attack has been actively and widely impacting businesses. According to CISA advisory, the ransomware group has impacted over 250 organizations and claimed approximately $42 million (USD) in ransomware proceeds. The ransomware group gains initial access via either less-secured VPN or Cisco vulnerabilities. Once the network is compromised, the threat actor is able to target a system and encrypt files with .akira extension.

What is the recommended Mitigation?

Review attack surfaces and …

access advisory akira akira ransomware attack businesses cisa cisa advisory cisco cve cve-2020-3259 gains initial access network organizations ransomware ransomware attack ransomware group vpn vulnerabilities what is