Akira consists of a group of criminals who developed and administers an extortion virus, says IT security expert Mattias Wåhlen to SvD.
- Then there are freelancers who get into various IT systems and run the virus.
Akira then takes a portion of the ransom, normally around 15-20 percent, and the freelancers keep the rest.
The group has connections to Russia, according to Wåhlen.
- Almost all groups that carry out this type of attack are from Russia.
The drama continues
The effects of the attack are still great for several companies and organizations.
The cinema company Filmstaden cannot accept bookings online.
- We expect it to take a few days, says Helena Eklund, Marketing Director Europe at Filmstaden.
Region Uppsala in staff mode
Some regions are also affected by the attack.
One of them is Region Uppsala, which was forced to switch to a reserve system and has now gone into staff mode.
Above all, it is new patient registrations, payments and orders that are affected in Uppsala.
But Director of Health and Medical Services Mikael Köhler is cautiously hopeful.
- The care works as usual.
It is the most important.
Then we have hopes for an internal solution that should be ready during the day.
But there is some disruption in various systems, but no intrusion into our systems.
We have a careful plan ahead, he tells TT.
The text is updated.