TRU Security

Updates from Acronis Threat Research Unit

Acronis
Threat actors go gaming: Electron-based stealers in disguise
The Acronis Threat Research Unit (TRU) uncovered a new malware campaign involving Leet Stealer, RMC Stealer (a modified version of Leet Stealer) and Sniffer Stealer.
Insights
05 August 2025 — 4 min read
Acronis
MSP cybersecurity news digest, July 29, 2025
Benign-appearing panda images used by new Koske Linux malware to deliver malicious code, Turkish...
04 August 2025 — 19 min read
MSPs a top target for Akira and Lynx ransomware
Acronis Threat Research Unit (TRU) analyzed recent samples of Akira and Lynx ransomware families to...
24 July 2025 — 4 min read
MSP cybersecurity news digest, July 14, 2025
SafePay inflicts major ransomware attack on Ingram Micro, Oyster malware loader spread through SEO...
16 July 2025 — 4 min read
MSP cybersecurity news digest, July 7, 2025
Zurich nonprofit Radix hit by Sarcoma ramsomware group, resulting in theft of 1.3TB of data, Google...
14 July 2025 — 3 min read
Acronis Cyberthreats Update, July 2025
The Acronis Cyberthreats Update covers current cyberthreat activity and trends, as observed by Acronis...
30 June 2025 — 4 min read
MSP cybersecurity news digest, June 30, 2025
ConnectWise ScreenConnect installer exploited by authenticode stuffing technique, attackers breach...
23 June 2025 — 4 min read
MSP cybersecurity news digest, June 18, 2025
Zero-day flaw and 66 vulnerabilities addressed in Microsoft’s June 2025 Patch Tuesday, Malware...
17 June 2025 — 4 min read
MSP cybersecurity news digest, June 9, 2025
FBI reports 900 organizations in the Americas and Europe hit by Play ransomware since October 2023,...
11 June 2025 — 3 min read
MSP cybersecurity news digest, June 3, 2025
Vulnerabilities in SimpleHelp RMM tool exploited by DragonForce ransomware, FBI issues warning about...

Trends and analysis

10 September 2024 — 14 min read
Acronis
Operation WordDrone – Drone manufacturers are being...
Threat actors are using Winword, an ancient version of Microsoft Office, to target drone manufacturers...
19 August 2024 — 8 min read
Acronis
Microsoft Exchange misconfiguration opens the door to...
Users who have not properly configured Microsoft Exchange are exposed to email spoofing, which could...
05 August 2024 — 9 min read
Acronis
Zola ransomware: The many faces of the Proton family
Zola ransomware is the latest addition to the Proton ransomware family. Acronis researchers break down...
22 July 2024 — 3 min read
Acronis
Acronis Cyberthreats Update, July 2024
The Acronis Cyberthreats Update reveals threat activity and trends during June 2024.
18 June 2024 — 4 min read
Acronis
Acronis Cyberthreats Update, June 2024
The Acronis Cyberthreats Update reveals threat activity and trends during May 2024.
11 June 2024 — 3 min read
Acronis
MSP cybersecurity news digest, June 11, 2024
Data of 560 million Ticketmaster customers for sale after alleged breach, London NHS hospitals revert...