Acronis Blog

Acronis Blog
Threat detection

All stories in Threat detection

06 May 2025  — 3 min read
Acronis
06 May 2025  — 3 min read
Why native RMM and security integration is essential for MSP 3.0 evolution
Native integration between RMM and security empowers MSPs to deliver stronger protection, more efficiently, without needing to reinvent their business models.
25 August 2022  — 9 min read
Acronis
25 August 2022  — 9 min read
SideWinder uses weaponized Word documents to compromise victims’ machines
The SideWinder APT group was first discovered in 2018, and since earlier this year has been actively targeting military, defense and other industries in South Asia. They used to spread phishing emails with Word files that downloaded additional files to decode, drop and start the malware, which collects and uploads victims’ data to remote servers. They've since infected Android devices with malicious apps in Google Play.
16 August 2022  — 11 min read
Acronis
16 August 2022  — 11 min read
Hydrox: A new wiper attacks
Hydrox was first spotted by Twitter user Petrovich on July 29, 2022. On August 3, EnigmaSoft described this threat as a harmful malware that actually wipes users' data. This conclusion was made from a “ransom note” which didn’t actually contain any credentials or links for paying the ransom.
26 July 2022  — 8 min read
Acronis
26 July 2022  — 8 min read
Symbiote: A new stealthy malware for Linux
Symbiote is a new Linux malware that steals users’ data and provides a backdoor to threat actors. It was discovered in June, 2022 and is characterized as a very stealthy malware. It uses a lot of evasion techniques, such as hooking functions, capturing TCP traffic and hiding its own files. It collects users' data and exfiltrates it on DNS servers.
22 July 2022  — 12 min read
Acronis
22 July 2022  — 12 min read
CloudMensis: a new macOS threat
In April 2022, ESET researchers found a yet-unknown backdoor on macOS. It was named CloudMensis due to the fact that it uses different public cloud storage for C2 communication. CloudMensis looks for different types of documents, captures keyboard input, searches local emails and can take screen captures.
30 June 2022  — 4 min read
Acronis
30 June 2022  — 4 min read
Exciting new features available in Acronis Cyber Protect Cloud 22.06
This June release of Acronis Cyber Protect Cloud 22.06 is particularly exciting. It not only introduces new features that will help MSPs deliver better service and value to their clients, but also enables them to automate routine tasks via brand-new, out-of-the-box scripting. Here is a synopsis of all the new features included in this release.
30 June 2022  — 8 min read
Acronis
30 June 2022  — 8 min read
Details about ZingoStealer: The new, free malware-as-a-service variant
On March 18, 2022, the Telegram public group published a post detailing the release of a new version of malware, a Windows data stealer called ZingoStealer. The group created a chat bot to field information requests, deliver more information, and even enable downloads of ZingoStealer. Later, the developer announced that cryptomining functionality was added to the stealer in order to maximize profits from its operations.
28 June 2022  — 7 min read
Acronis
28 June 2022  — 7 min read
Important details About BlackCat: The new version of the ALPHV ransomware-as-a-service
On March 16, 2022, security specialists identified a new version of BlackCat ransomware (so named because the software displays a black cat on the victim’s payment site). These experts also noted that some previous YARA rules no longer match, which will make it difficult to find malicious files.
24 May 2022  — 6 min read
Acronis
24 May 2022  — 6 min read
Cyber resilience: Software for business continuity
Today’s security service providers and IT professionals need to assume that data is constantly under attack. So, it’s essential that cyber resilience must include the ability to continue operations while under attack and to recover from attacks. Cyber resilience creates an end-to-end approach to threat management encompassing information security, business continuity, and disaster recovery.
27 April 2022  — 2 min read
Acronis
27 April 2022  — 2 min read
Easily access and manage remote workloads with Acronis Cyber Protect Connect
Acronis Cyber Protect Connect is a remote desktop and monitoring solution that enables businesses and individuals to easily access and manage remote workloads and fix any issues ― anytime, anywhere.
22 April 2022  — 14 min read
Acronis
22 April 2022  — 14 min read
HermeticWiper and HermeticRansom delivered via Active Directory GPO
On February 23, 2022, a new data wiper and ransomware were deployed on a large number of devices in the Ukraine, as ESET Research reported on Twitter. Just before this, a couple of Ukrainian government sites and services were subjected to DDoS attacks. Cybersecurity specialists discovered that the malware was deployed via Microsoft Active Directory GPO. In addition to the disk wiper and ransomware, a worm component was deploy
16 March 2022  — 9 min read
Acronis
16 March 2022  — 9 min read
WhisperGate malware targets Ukrainian government sites
Multiple government sites in Ukraine were shut down on January 13, 2022, the result of a large-scale cyberattack by the WhisperGate malware. Microsoft Intelligence named this activity "DEV-0586" and identified it as destructive malware that used to be ransomware. Its main purpose is to disrupt the system and damage files beyond the possibility of their recovery.
18 February 2022  — 4 min read
Acronis
18 February 2022  — 4 min read
Top Takeaways from the Acronis #CyberFit Summit Singapore
That’s a wrap on the Acronis #CyberFit Summit World Tour 2021. Our fourth and final stop went live simultaneously at the Acronis headquarters in Singapore and virtually around the world, offering an engaging and insightful opportunity for MSPs, resellers, distributors, HSPs and more looking to make their IT channel business more productive and profitable. Here are some of the top takeaways from the Acronis #CyberFit Summit