Netskope Threat Labs

Megazord

ATP Sandbox Adv. HeuristicsNetskope IPS

Megazord is a Rust based ransomware family used against Windows environments since at least August 2023. Researchers attribute it to the Akira group based on overlapping infrastructure, though evidence suggests it is possibly not exclusive to that group. Its use of Rust follows a broader trend of ransomware crews adopting the language to complicate analysis of their encryptors.

First seen
October 2023
Last seen
October 2026

6 techniques across 3 tactics.

TA0002 Execution

TA0007 Discovery

  • T1057Process Discovery
  • T1083File and Directory Discovery
  • T1654Log Enumeration

TA0040 Impact

Alert Name
Win64.Ransomware.Megazord