Akira RaaS Targets Nutanix VMs, Threatens Critical Orgs

This advisory summarizes coordinated warnings from US and European agencies about Akira ransomware activity: a fast-moving RaaS operation that has expanded to target hypervisors (including Nutanix AHV), exploited known vulnerabilities (e.g., CVE-2024-40711, CVE-2024-40766), used commercial RMM tools and malware like SystemBC/StoneStop/PoorTry to undermine defenses, and performed lightning-fast data exfiltration across critical sectors, collecting hundreds of millions in ransom and affecting over a thousand known victims.