Unraveling Akira Ransomware

### Executive Summary: Akira ransomware is a newly observed double-extortion ransomware strain (active since April 2023) that encrypts files with a ".akira" extension, uses CryptoAPI (RSA/AES) with a hardcoded public key, deletes shadow copies via WMI/PowerShell, and exfiltrates data to a leak site; CRIL documents 15+ publicly disclosed victims across multiple industries, provides a sample SHA256, MITRE mappings, and mitigation recommendations.