# Akira ransomware affiliate

> As of 2026-10-13, Akira ransomware affiliate is a threat actor tracked by Threadlinqs Intelligence across 1 threat spanning threat intel.

- **Tracked threats:** 1
- **Categories:** THREAT_INTEL
- **As of:** 2026-10-13

## Tracked threats

- [MFA Coverage Gaps (Cloud-only MFA, VPN, RDP, Windows Logon) Exploited with Stolen Credentials - Akira Affiliate SonicWall VPN Intrusion (Aug 2026)](https://intel.threadlinqs.com/threat/TL-2026-3429) — MEDIUM

## Full data

Infrastructure, IOC values and detection queries (Splunk SPL / Microsoft KQL / Sigma) require the Threadlinqs MCP server (Purple tier): https://intel.threadlinqs.com/mcp

Canonical: https://intel.threadlinqs.com/actor/Akira%20ransomware%20affiliate