SonicWall firewall devices hit in surge of Akira ransomware attacks
WORLDWIDE, AUG 1 – The Akira ransomware gang exploited a likely zero-day SonicWall VPN flaw to attack over 300 global organizations, collecting $42 million in ransoms, FBI says.
6 Articles
6 Articles
Akira ransomware targets SonicWall SSL VPN devices, potentially exploiting a zero-day vulnerability or stolen credentials. Attackers authenticate to the VPN through a VPS, encrypting data for a short period of time. Disabling VPN services and strengthening security measures are recommended. Akira, which emerged in 2023, had extorted approximately $42 million by early 2024, targeting Italian businesses.
Akira Ransomware Exploits SonicWall VPNs in Likely Zero-Day Attack on Fully-Patched Devices
SonicWall SSL VPN devices have become the target of Akira ransomware attacks as part of a newfound surge in activity observed in late July 2025. "In the intrusions reviewed, multiple pre-ransomware intrusions were observed within a short period of time, each involving VPN access through SonicWall SSL VPNs," Arctic Wolf Labs researcher Julian Tuin said in a report. The cybersecurity company
Ransomware spike linked to potential zero-day flaw in SonicWall devices | #ransomware | #cybercrime - National Cyber Security Consulting
A recent wave of ransomware attacks targeting SonicWall firewall devices may be related to a zero-day vulnerability in the products, according to researchers. Anomalous firewall activity that began on July 15 and involved VPN access through SonicWall SSL VPNs morphed into intrusions the following week, researchers at Arctic Wolf said. “This appears to be affecting […] Thank you for subscribing to our RSS feed! The post Ransomware spike linked to…
SonicWall Firewall Devices Hit In Surge Of Akira Ransomware Attacks - Cybernoz - Cybersecurity News
SonicWall firewall devices have been increasingly targeted since late July in a surge of Akira ransomware attacks, potentially exploiting a previously unknown security vulnerability, according to cybersecurity company Arctic Wolf. Akira emerged in March 2023 and quickly claimed many victims worldwide across various industries. Over the last two years, Akira has added over 300 organizations to its dark web leak portal and claimed responsibility f…
Coverage Details
Bias Distribution
- 100% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium