ATT&CKReferencesArctic Wolf Akira 2023

Arctic Wolf Akira 2023

Steven Campbell, Akshay Suthar, & Connor Belfiorre. (2023, July 26). Conti and Akira: Chained Together. Retrieved February 20, 2024.

Open the source

Techniques0

Not cited by any technique.

Groups1

Software0

None recorded.

Campaigns0

None recorded.

Procedure examples4

TechniqueUsed byProcedure example
T1018
Remote System Discovery
GroupAkira

Akira uses software such as Advanced IP Scanner and MASSCAN to identify remote hosts within victim networks.

T1078
Valid Accounts
GroupAkira

Akira uses valid account information to remotely access victim networks, such as VPN credentials.

T1219
Remote Access Tools
GroupAkira

Akira uses legitimate utilities such as AnyDesk and PuTTy for maintaining remote access to victim environments.

T1482
Domain Trust Discovery
GroupAkira

Akira uses the built-in Nltest utility or tools such as AdFind to enumerate Active Directory trusts in victim environments.

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.