Cyber Threat Intelligence

As of 2026, the cyber threat landscape continues to evolve at a fast pace. Here are some key findings from recent industry reports to help put the Akira ransomware threat - and the wider ransomware ecosystem - into context:

• CrowdStrike’s 2026 Global Threat Report found the average eCrime breakout time dropped to just 29 minutes - a 65% speed increase from 2024 - meaning attackers are moving laterally faster than ever once inside a network. Additionally, 82% of 2025 detections were malware-free, relying instead on stolen credentials and living-off-the-land techniques.
• Ransomware activity surged 60% in H1 2025 according to CyberProof’s 2025 Mid-Year Report, with manufacturing being the most targeted sector (75 incidents globally) and the United States remaining the top targeted country.
• Mandiant’s M-Trends 2025 report found the global median dwell time was 11 days in 2024, up from 10 days in 2023. Exploits remained the top initial infection vector (33%), followed by stolen credentials (16%). The most targeted industries were financial services (17.4%), business/professional services (11.1%), and high tech (10.6%).
• The FBI’s 2025 Internet Crime Report recorded over 1 million complaints (1,008,597) to IC3, up from 859,532 in 2024, with cyber-enabled crime costing Americans nearly $21 billion.
• Google Threat Intelligence Group identified 75 zero-day vulnerabilities actively exploited in 2024, underscoring the importance of rapid patch management and proactive threat intelligence.

These statistics reinforce why understanding ransomware groups like Akira - their tactics, techniques, and procedures (TTPs) - remains critical for organizations of all sizes.