Howling Scorpius: The Ransomware Group Giving Cybersecurity Experts Nightmares
Howling Scorpius is shaking up the cybercrime scene like a tech-savvy scorpion at a disco. Specializing in double extortion, they’ve got small to medium businesses in North America, Europe, and Australia dancing to their tune. With a retro-green Tor-based leak site, they’re like the 80s, but with ransomware instead of leg warmers.

Hot Take:
Howling Scorpius, the new kid on the ransomware block, has quickly risen to the top five most-wanted list with their Akira RaaS. It’s like the cybercriminal version of a boy band, but instead of catchy tunes, they’re dropping double extortion hits! Their ability to target both Windows and Linux shows they’re not just barking, they’re biting too. Beware, this group might just be howling at your company’s moon next!
Key Points:
- Howling Scorpius launched Akira ransomware in early 2023 and targets SMEs across various global regions.
- Their double extortion strategy involves encrypting and exfiltrating data, with a Tor-based leak site for pressure.
- They’ve developed encryptors for both Windows and Linux, including ESXi hosts.
- Palo Alto Networks offers protection against Akira through products like Cortex XDR and Advanced WildFire.
- Howling Scorpius is continuously updating its toolkit, enhancing its threat and reach.
Already a member? Log in here