Acronis Blog

Acronis Blog
Ransomware protection

All stories in Ransomware protection

16 January 2025  — 3 min read
Acronis
16 January 2025  — 3 min read
Acronis: The leader in EDR detection on Windows
Acronis Cyber Protect Cloud with Advanced Security + XDR was evaluated by SE Labs for its protection against targeted attacks from two advanced threat groups.
05 July 2021  — 2 min read
Acronis
05 July 2021  — 2 min read
Threat analysis: N3tw0rm ransomware
On May 2, 2021, сybercriminal group N3tw0rm attacked the computer networks of international clothing retailer H&M in Israel and threatened to release customer data. This was reported by the Israeli magazine Haaretz, which previously reported attacks on at least four Israeli companies and one non-profit organization.
05 July 2021  — 4 min read
Acronis
05 July 2021  — 4 min read
Threat analysis: Dharma (CrySiS) ransomware
Dharma ransomware (a.k.a. CrySiS) is used in targeted attacks, and is delivered by cybercriminals manually through Remote Desktop Protocol (RDP) connections, typically by exploiting leaked or weak credentials.
05 July 2021  — 8 min read
Acronis
05 July 2021  — 8 min read
Threat analysis: LockBit ransomware
●     Two variants have been observed — one written in C# and one in C++ — and LockBit may be delivered with UPX or a custom packer.
18 June 2021  — 4 min read
Acronis
18 June 2021  — 4 min read
Cyberthreat update from Acronis CPOCs: Week of June 14, 2021
Here at Acronis, we’re always monitoring for dangers to your data, deploying updates to handle newly-discovered vulnerabilities, and issuing alerts and recommendations to help you stay protected. Our global network of Acronis Cyber Protection Operations Centers (CPOCs) continue to work around the clock to proactively detect and defend against the latest cyberthreats.
15 June 2021  — 2 min read
Acronis
15 June 2021  — 2 min read
Catching a wave: Exploring the hosting industry’s rapid growth
If you think the web hosting services business is maturing, flattening, maybe getting stale, think again. Last year, the global hosting market generated a robust $75 billion in revenues despite a modest slowdown attributed to the pandemic. In 2021, its growth is accelerating again, forecast to grow to $267 billion by 2028, according to Fortune Business Insights. That is a rocket worth catching a ride on.
11 June 2021  — 5 min read
Acronis
11 June 2021  — 5 min read
Cyberthreat update from Acronis CPOCs: Week of June 7, 2021
Here at Acronis, we’re always monitoring for dangers to your data, deploying updates to handle newly-discovered vulnerabilities, and issuing alerts and recommendations to help you stay protected. Our global network of Acronis Cyber Protection Operations Centers (CPOCs) continue to work around the clock to proactively detect and defend against the latest cyberthreats. Part of this work includes video updates to inform you of modern hazards in the digital landscape — such as ransomware strikes against U.S. infrastructure and brand-new threats to watch out for. Here’s a look at some of the most recent breaking news and analyses:
08 June 2021  — 3 min read
Acronis
08 June 2021  — 3 min read
What’s a live ransomware attack look like? Take a look
In the wake of the Colonial Pipeline breach and the JBS attack, ransomware has recaptured everyone’s attention – including your management. See what happens when malware threatens the family road trip or backyard barbecue. That makes it an opportune moment to upgrade your understanding of how ransomware attacks work, and revisit your strategies for protecting your company’s data and uptime against this most destructive and increasingly widespread malware threats. Acronis is giving you two excellent chances to do just that.
05 June 2021  — 3 min read
Acronis
05 June 2021  — 3 min read
JBS attack shows the immense threat posed by ransomware
The world’s largest meat supplier, JBS, was forced to halt operations at many of its U.S. and Australian processing plants after a massive cyberattack. This activity threatened supply chains across the world, and resulted in an immediate rise in wholesale red meat prices. This cyberattack, while notable in its own right, is also simply the latest example in a dangerous pattern of escalating ransomware hazards.
04 June 2021  — 5 min read
Acronis
04 June 2021  — 5 min read
Threat analysis: DoppelPaymer ransomware
DoppelPaymer is a successor of BitPaymer ransomware, and is part of the Dridex malware family. It’s currently being distributed in various forms, including phishing or spam emails with attached documents that are embedded with malicious code — either JavaScript or VBScript. On execution, this code downloads DoppelPaymer’s first-stage loader on the victim’s machine. The attackers then use the PowerShell Empire toolkit to run a brute-force attack on Active Directory. The Mimikatz module is used to dump passwords from the system memory.
04 June 2021  — 5 min read
Acronis
04 June 2021  — 5 min read
Threat analysis: Pysa (Mespinoza) ransomware
Pysa takes an approach commonly referred to as “big game hunting,” meaning that the ransomware group targets high-value assets in organizations that are particularly sensitive to data loss or system downtime. The idea is that victims — which may include healthcare providers, government agencies, and managed service providers — are more likely to quickly pay the ransom, regardless of its cost.
04 June 2021  — 8 min read
Acronis
04 June 2021  — 8 min read
Conti ransomware shuts down backup services and unlocks files with Windows Restart Manager
Conti ransomware shuts down backup services and unlocks files with Windows Restart Manager before encryption.
04 June 2021  — 8 min read
Acronis
04 June 2021  — 8 min read
Sekhmet ransomware Analysis
Sekhmet ransomware, which first appeared in March 2020, has already disclosed the stolen data from at least six victims to date. One recent known attack that occurred on 20 June 2020 targeted SilPac, a gas handling solutions company based in Santa Clara, California.