Global Security Forum

Security Global Forum

Our mission is to provide clients with an online user community of industry peers and IBM experts, to exchange tips and tricks, best practices, and product knowledge. We hope the information you find here helps you maximize the value of your IBM Security solutions.

 View Only
  • 1.  Server is Encrypted by a Ransomware known AKIRA (.akira)

    Posted Tue September 30, 2025 10:20 AM

    Hello, I am doctor by profession and yesterday my server got encrypted by a ransomware virus. It is showing .akira in the end of all files. After doing some research on internet, I got to know that it is akira ransomware, which is very dangerous. I tried using Avast Decryptor for Akira ransomware but it didn't work. I do not have any kind of offline backups. I am looking for the help here. Please, do help me. Thank you very much.



    ------------------------------
    Dr Aspain
    ------------------------------


  • 2.  RE: Server is Encrypted by a Ransomware known AKIRA (.akira)

    Posted Mon October 06, 2025 08:32 AM

    Blog Entry



    ------------------------------
    Asim Abdulrahman Mohammed Omer
    ------------------------------



  • 3.  RE: Server is Encrypted by a Ransomware known AKIRA (.akira)

    Posted Tue October 07, 2025 02:14 PM

    didn't get you.



    ------------------------------
    Dr Aspain
    ------------------------------



  • 4.  RE: Server is Encrypted by a Ransomware known AKIRA (.akira)

    Posted Sun October 12, 2025 02:58 PM

    Finally, resolved my issue. Got help from a cyber security firm known as akira decryptor.

    I am attaching their website for reference.

    https://akiradecryptor.com/



    ------------------------------
    Dr Aspain
    ------------------------------



  • 5.  RE: Server is Encrypted by a Ransomware known AKIRA (.akira)

    Posted Wed October 15, 2025 12:17 PM

    Thanks for sharing your experience - out of curiosity, what platform are you running/what OS did the attack happen on?

    Glad you were able to get this resolved!



    ------------------------------
    Hrithik Govardhan
    Senior Engineer
    Rocket Software
    MN
    ------------------------------



  • 6.  RE: Server is Encrypted by a Ransomware known AKIRA (.akira)

    Posted 29 days ago

    It was windows server, which was infected by Akira ransomware.



    ------------------------------
    Dr Aspain
    ------------------------------



  • 7.  RE: Server is Encrypted by a Ransomware known AKIRA (.akira)

    Posted Tue October 14, 2025 02:45 AM

    I'm really sorry this happened. Without a backup or a working decryptor, it's hard to fix. Try disconnecting your computer from the Internet and seek help from a cyber security expert as soon as possible.



    ------------------------------
    Alex 307
    ------------------------------



  • 8.  RE: Server is Encrypted by a Ransomware known AKIRA (.akira)

    Posted 29 days ago

    I already got help from Akira Decryptor: 

    Mentioned their website on the top already.



    ------------------------------
    Dr Aspain
    ------------------------------