TRU Security

Updates from Acronis Threat Research Unit

Acronis
Threat actors go gaming: Electron-based stealers in disguise
The Acronis Threat Research Unit (TRU) uncovered a new malware campaign involving Leet Stealer, RMC Stealer (a modified version of Leet Stealer) and Sniffer Stealer.
Insights
21 August 2025 — 5 min read
Acronis
MSP cybersecurity news digest, August 13, 2025
Clinical data stolen in cyberattack on dialysis provider DaVita, Chanel, Pandora, Google and Cisco...
18 August 2025 — 4 min read
MSP cybersecurity news digest, August 4, 2025
Scattered Spider group disrupted, but imitators carry on, Fake OAuth apps and Tycoon phishing kit used...
11 August 2025 — 3 min read
Acronis Cyberthreats Update, August 2025
The Acronis Cyberthreats Update covers current cyberthreat activity and trends, as observed by Acronis...
05 August 2025 — 4 min read
MSP cybersecurity news digest, July 29, 2025
Benign-appearing panda images used by new Koske Linux malware to deliver malicious code, Turkish...
04 August 2025 — 19 min read
MSPs a top target for Akira and Lynx ransomware
Acronis Threat Research Unit (TRU) analyzed recent samples of Akira and Lynx ransomware families to...
24 July 2025 — 4 min read
MSP cybersecurity news digest, July 14, 2025
SafePay inflicts major ransomware attack on Ingram Micro, Oyster malware loader spread through SEO...
16 July 2025 — 4 min read
MSP cybersecurity news digest, July 7, 2025
Zurich nonprofit Radix hit by Sarcoma ramsomware group, resulting in theft of 1.3TB of data, Google...
14 July 2025 — 3 min read
Acronis Cyberthreats Update, July 2025
The Acronis Cyberthreats Update covers current cyberthreat activity and trends, as observed by Acronis...
30 June 2025 — 4 min read
MSP cybersecurity news digest, June 30, 2025
ConnectWise ScreenConnect installer exploited by authenticode stuffing technique, attackers breach...

Trends and analysis

10 January 2024 — 12 min read
Acronis
CustomLoader: A malicious link
CustomerLoader was first spotted in June 2023, delivering different payloads to its targets. It is a...
12 December 2023 — 4 min read
Acronis
Acronis Cyberthreats Update, December 2023
The Acronis Cyberthreats Update covers current cyberthreat activity and trends, as observed by Acronis...
15 November 2023 — 10 min read
Acronis
Ransomware diaries, part 1: QazLocker -Cyb3rK1dZ has more...
This article is the first in the ransomware diaries series. We will provide an in-depth look at some...
06 November 2023 — 4 min read
Acronis
Acronis Cyberthreats Update, November 2023
The Acronis Cyberthreats Update covers current cyberthreat activity and trends, as observed by Acronis...
02 November 2023 — 2 min read
Acronis
AV-Test results: Acronis Cyber Protect Cloud scores 10/10...
AV-Test unveiled their Advanced Threat Protection test results for 10 real-life scenarios they ran in...
25 October 2023 — 18 min read
Acronis
Ursnif, the banking trojan
Ursnif, also known as Gozi or Dreambot, is a banking trojan. Ursnif is typically delivered via...