TRU Security

Updates from Acronis Threat Research Unit

Acronis
Threat actors go gaming: Electron-based stealers in disguise
The Acronis Threat Research Unit (TRU) uncovered a new malware campaign involving Leet Stealer, RMC Stealer (a modified version of Leet Stealer) and Sniffer Stealer.
Insights
August 21, 2025 — 5 min read
Acronis
MSP cybersecurity news digest, August 13, 2025
Clinical data stolen in cyberattack on dialysis provider DaVita, Chanel, Pandora, Google and Cisco...
August 18, 2025 — 4 min read
MSP cybersecurity news digest, August 4, 2025
Scattered Spider group disrupted, but imitators carry on, Fake OAuth apps and Tycoon phishing kit used...
August 11, 2025 — 3 min read
Acronis Cyberthreats Update, August 2025
The Acronis Cyberthreats Update covers current cyberthreat activity and trends, as observed by Acronis...
August 05, 2025 — 4 min read
MSP cybersecurity news digest, July 29, 2025
Benign-appearing panda images used by new Koske Linux malware to deliver malicious code, Turkish...
August 04, 2025 — 19 min read
MSPs a top target for Akira and Lynx ransomware
Acronis Threat Research Unit (TRU) analyzed recent samples of Akira and Lynx ransomware families to...
July 24, 2025 — 4 min read
MSP cybersecurity news digest, July 14, 2025
SafePay inflicts major ransomware attack on Ingram Micro, Oyster malware loader spread through SEO...
July 16, 2025 — 4 min read
MSP cybersecurity news digest, July 7, 2025
Zurich nonprofit Radix hit by Sarcoma ramsomware group, resulting in theft of 1.3TB of data, Google...
July 14, 2025 — 3 min read
Acronis Cyberthreats Update, July 2025
The Acronis Cyberthreats Update covers current cyberthreat activity and trends, as observed by Acronis...
June 30, 2025 — 4 min read
MSP cybersecurity news digest, June 30, 2025
ConnectWise ScreenConnect installer exploited by authenticode stuffing technique, attackers breach...

Trends and analysis

July 26, 2022 — 8 min read
Acronis
Symbiote: A new stealthy malware for Linux
Symbiote is a new Linux malware that steals users’ data and provides a backdoor to threat actors. It...
July 22, 2022 — 12 min read
Acronis
CloudMensis: a new macOS threat
In April 2022, ESET researchers found a yet-unknown backdoor on macOS. It was named CloudMensis due to...
June 30, 2022 — 8 min read
Acronis
Details about ZingoStealer: The new, free...
On March 18, 2022, the Telegram public group published a post detailing the release of a new version...
June 28, 2022 — 7 min read
Acronis
Important details About BlackCat: The new version of the...
On March 16, 2022, security specialists identified a new version of BlackCat ransomware (so named...
April 22, 2022 — 14 min read
Acronis
HermeticWiper and HermeticRansom delivered via Active...
On February 23, 2022, a new data wiper and ransomware were deployed on a large number of devices in...
March 16, 2022 — 9 min read
Acronis
WhisperGate malware targets Ukrainian government sites
Multiple government sites in Ukraine were shut down on January 13, 2022, the result of a large-scale...