Acronis Blog

Acronis Blog
Cyber protection

All stories in Cyber protection

20 May 2025  — 22 min read
Acronis
20 May 2025  — 22 min read
From banks to battalions: SideWinder’s attacks on South Asia’s public sector
Acronis Threat Research Unit (TRU) uncovered a new SideWinder APT campaign targeting high-level government institutions in Sri Lanka, Bangladesh and Pakistan.
07 July 2021  — 4 min read
Acronis
07 July 2021  — 4 min read
Introducing Acronis’ new CEO: Patrick Pulvermueller
Introducing Acronis’ new CEO, Patrick Pulvermueller! Hear how this accomplished IT leader plans to accelerate growth, advance go-to-market initiatives, and drive Acronis’ service provider strategy to new heights in this special greeting from the new CEO of the world’s cyber protection leader.
24 June 2021  — 2 min read
Acronis
24 June 2021  — 2 min read
Acronis Cyber Infrastructure 4.6 adds new features, optimizations
Acronis’ ongoing commitment to cyber protection requires continued innovation and refinement of our solutions — both to meet the shifting cyberthreat landscape, and to set users up for success with usability and customization improvements. To that end, we’ve recently released version 4.6 of Acronis Cyber Infrastructure. This update introduces new capabilities to further improve performance, usability, and security — as well as fixes for a few existing issues.
24 June 2021  — 6 min read
Acronis
24 June 2021  — 6 min read
What is Social Engineering?
According to recent studies, cybercriminals use social engineering techniques to drive 98% of cyberattacks, making this an important topic of discussion for businesses and users. If your organization is a managed service provider (MSP), read on and discover how social engineering works and what you can do to help your clients protect their business from attacks.
24 June 2021  — 6 min read
Acronis
24 June 2021  — 6 min read
What is IT risk management?
Murphy has two laws, and both apply when it comes to IT risk management. “Anything that can go wrong, will go wrong” is Murphy’s first law, which is considered accurate because, given enough time, there is a high probability that anything will go wrong. You need to be prepared for anything! Murphy’s second law states that “nothing is as easy as it looks,” and this is also true when it comes to managing business risk.
10 June 2021  — 3 min read
Acronis
10 June 2021  — 3 min read
Stop email cyberthreats with Advanced Email Security
94% of all malware and 96% of all social engineering attacks today are delivered through email. For managed service providers (MSPs), that makes email security a top priority but responding to this threat takes more than just adding a new cybersecurity tool to build services on top of. To help service providers defend their clients' email systems, Acronis has partnered with Perception Point to release the new Advanced Email Security pack for Acronis Cyber Protect Cloud.
04 June 2021  — 5 min read
Acronis
04 June 2021  — 5 min read
Threat analysis: DoppelPaymer ransomware
DoppelPaymer is a successor of BitPaymer ransomware, and is part of the Dridex malware family. It’s currently being distributed in various forms, including phishing or spam emails with attached documents that are embedded with malicious code — either JavaScript or VBScript. On execution, this code downloads DoppelPaymer’s first-stage loader on the victim’s machine. The attackers then use the PowerShell Empire toolkit to run a brute-force attack on Active Directory. The Mimikatz module is used to dump passwords from the system memory.
04 June 2021  — 5 min read
Acronis
04 June 2021  — 5 min read
Threat analysis: Pysa (Mespinoza) ransomware
Pysa takes an approach commonly referred to as “big game hunting,” meaning that the ransomware group targets high-value assets in organizations that are particularly sensitive to data loss or system downtime. The idea is that victims — which may include healthcare providers, government agencies, and managed service providers — are more likely to quickly pay the ransom, regardless of its cost.
04 June 2021  — 8 min read
Acronis
04 June 2021  — 8 min read
Conti ransomware shuts down backup services and unlocks files with Windows Restart Manager
Conti ransomware shuts down backup services and unlocks files with Windows Restart Manager before encryption.
04 June 2021  — 8 min read
Acronis
04 June 2021  — 8 min read
Sekhmet ransomware Analysis
Sekhmet ransomware, which first appeared in March 2020, has already disclosed the stolen data from at least six victims to date. One recent known attack that occurred on 20 June 2020 targeted SilPac, a gas handling solutions company based in Santa Clara, California.
04 June 2021  — 7 min read
Acronis
04 June 2021  — 7 min read
Analysis of Ragnar Locker Ransomware
The threat actor begin the attack by compromising the company’s network via RDP service, using brute force to guess weak passwords or with stolen credentials bought on the Dark Web. Next, the attacker performs second-stage reconnaissance. To elevate privileges, the attacker exploits the CVE-2017-0213 vulnerability in the Windows COM Aggregate Marshaler to run arbitrary code with elevated privileges.
01 June 2021  — 4 min read
Acronis
01 June 2021  — 4 min read
What is an email cyberattack?
It is another workday, and one of your client’s users is perusing through their inbox and sees an email from the U.S. Internal Revenue Service (IRS). Her first thought is, “Why would the IRS be contacting me?” Without thinking further, she quickly opens the email, clicks on the link and BAM! Next thing she sees on her screen is a message telling her that her files have been encrypted and she must pay a ransom to get the key to decrypt them.
29 May 2021  — 2 min read
Acronis
29 May 2021  — 2 min read
SolarWinds hackers launch new attacks, warns Microsoft
The Microsoft Threat Intelligence Center (MSTIC) has uncovered a wide-scale spear phishing campaign driven by Nobelium — the threat actors behind the recent SolarWinds attacks and the SUNBURST backdoor used in those strikes. Nobelium continues its attacks on U.S. agencies and the private organizations in their sphere. The group managed to hijack an email distribution account used by the United States Agency for International Development (USAID), sending thousands of authentic-looking but malware-laden messages to a variety of human rights groups, think tanks, and other organizations.