Threat Intelligence / Actor / Akira Ransomware Gang

Akira Ransomware Gang

As of 2026-07-21, Akira Ransomware Gang is a Russia / Post-Soviet-nexus threat actor tracked by Threadlinqs Intelligence across 1 threat spanning malware. Also known as BumbleBee Operators, BumbleBee Operators (EXOTIC LILY).

Nation: Russia / Post-Soviet · 1 tracked threat(s) · Categories: MALWARE

Also known as: Akira Ransomware Gang, BumbleBee Operators, BumbleBee Operators (EXOTIC LILY), Multiple Affiliate Groups

Tracked threats

SEO Poisoning Supply Chain Campaign Distributing Akira Ransomware via Trojanized Enterprise Software — CRITICAL

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence