Bitcoin

Cyber

Security

Akira

Force

Akira, the ransomware that stole $42 million from over 250 organizations across North America, Europe and Australia within a year, is now actively targeting businesses in Singapore.
Singaporean authorities issued a joint advisory alerting local businesses about the <a href="https://cointelegraph.com/news/bitcoin-ransomware-akira-42-m-250-victims-fbi">rising threat of an Akira ransomware</a> variant. 
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-06/055bd120-5776-42c2-8ce5-b6d709a23dcb.png" alt="" title="">
 <figcaption style="text-align: center;">
 Source: <a href="https://x.com/CSAsingapore/status/1799304478434472418" target="_blank" rel="noopener nofollow">Cyber Security Agency of Singapore</a>
 </figcaption>
</figure>
The alert comes after agencies, including the Cyber Security Agency of Singapore, the Singapore Police Force and the Personal Data Protection Commission, recently received several complaints from victims of the cyberattack.
<h2 data-ct-non-breakable="true" id="primary-targets-of-akira-ransomware">Primary targets of Akira ransomware</h2>
Prior investigations conducted by the United States Federal Bureau of Investigation found that Akira ransomware has been targeting businesses and critical infrastructure entities. 
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-06/9eb67afe-15b7-495c-b780-0ae319d53918.jpg" alt="" title="">
 <figcaption style="text-align: center;">
 Akira’s ransomware message to victims after successful hijacking. Source: Singapore Police
 </figcaption>
</figure>
The Singaporean authorities explained ways to detect, deter and neutralize Akira attacks. Businesses that have been compromised are advised to refrain from paying ransom to the attackers. 
<h2 data-ct-non-breakable="true" id="refrain-from-paying-ransom">Refrain from paying ransom</h2>
Akira members demand payments in cryptocurrencies such as Bitcoin (<a href="https://cointelegraph.com/bitcoin-price">BTC</a>) to return control of their computer systems and internal data. However, Singapore authorities have asked businesses not to make payments:
<blockquote data-ct-non-breakable="true">
 “If your organization’s systems have been compromised with ransomware, we do not recommend paying the ransom and advise you to report the incident immediately to the authorities. Paying the ransom does not guarantee that the data will be decrypted or that threat actors will not publish your data.”
</blockquote>
Additionally, malicious entities may attempt another attack in hopes of more ransom. FBI found that Akira never contacts the victims and expects them to reach out. 
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-06/37981a76-796d-4d72-9b19-250c87cecf50.png" alt="" title="">
 <figcaption style="text-align: center;">
 Cybersecurity best practices against ransomware attacks. Source: cisa.gov
 </figcaption>
</figure>
Some recommended threat mitigation techniques are implementing a recovery plan and multifactor authentication, filtering network traffic, disabling unused ports and hyperlinks and system-wide encryption.
Related: <a href="https://cointelegraph.com/news/ransomware-payments-surpass-1-billion">Ransomware returns: Chainalysis flags record $1B payments in 2023</a>
Cybersecurity firm Kaspersky recently found that North Korean hackers were <a href="https://cointelegraph.com/news/north-korean-hackers-deploy-durian-malware-targeting-south-korean-crypto-firms">targeting South Korean crypto businesses</a> using Durian malware. 
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-06/803f1063-f135-46fa-9300-ae8a35df75cd.png" alt="" title="">
 <figcaption style="text-align: center;">
 Source: <a href="https://x.com/kaspersky/status/1788614943018827969" target="_blank" rel="noopener nofollow">Kaspersky</a>
 </figcaption>
</figure>
“Durian boasts comprehensive backdoor functionality, enabling the execution of delivered commands, additional file downloads, and exfiltration of files,” explained Kaspersky.
Additionally, Kaspersky noted that LazyLoad was also used by Andariel, a sub-group within fellow North Korean hacking consortium Lazarus Group — suggesting a “tenuous” connection between Kimsuky and the more notorious hacking group.
Magazine: <a href="https://cointelegraph.com/magazine/longevity-escape-velocity-jose-luis-cordeiro-biological-immortality-2030/">Longevity expert: AI will help us become ‘biologically immortal’ from 2030</a>

Singapore alerts businesses to Bitcoin ransomware risk

Table of Contents

Cointelegraph

Other articles published on Jun 10, 2024

XRP Attracts $1.2 Million Inflow Amid Altcoin Market Doldrums

Bitcoin Stabilizes at $69K After Sudden Sell-Off Amid Volatile Market Conditions

ZKNation Introduces Governance Community for ZKsync Protocol

GameStop $GME on $ETH with CA: 0x246 (June 24) launched last January making a strong comeback.

Memecoin Market Analysis: What’s Next for Dogecoin, Shiba Inu, Pepe, GameStop Prices?

Oil Rebounds, Gaining 6.6% YTD: Investors Eye Fed Meeting and OPEC Reports

Join our free newsletter for daily crypto updates!