Acronis Blog

Acronis Blog
Vulnerability management

All stories in Vulnerability management

January 04, 2024  — 6 min read
Acronis
January 04, 2024  — 6 min read
MSP operational risk mitigation strategies in 2024: Defeat technician burnout
The majority of MSPs grapple with talent shortages and an IT skills gap. It’s an ongoing challenge to ensure the most highly skilled and specialized technicians are available to focus on the most critical issues. Here, we uncover the top reasons MSP technicians experience burnout, the role of modern endpoint management solutions in improving efficiency, and the Acronis solution for optimizing MSP business operations.
February 02, 2023  — 8 min read
Acronis
February 02, 2023  — 8 min read
Vawtrak: A banking trojan with a long history
Vawtrak is a banking trojan — a form of malware that attempts to steal credentials from banks. It spreads via phishing emails and spam emails that contain a malicious document, loaded with a macro. The primary target of this malware are banks and insurance companies, mainly in Germany.
January 05, 2023  — 9 min read
Acronis
January 05, 2023  — 9 min read
Royal ransomware’s actors make high demands
Royal ransomware was first spotted in January 2022, targeting different corporations. This group does not provide ransomware-as-a-service. The attackers demand figures ranging from $250,000 to over $2 million from their victims.
December 09, 2022  — 9 min read
Acronis
December 09, 2022  — 9 min read
KmsdBot: DDoS and cryptomining combined
On November 10, 2022, the Akamai Security Intelligence Response Team published an article with the description of the newly spotted KmsdBot, which infected their honeypot. Gaming company FiveM, which provides software for GTA V for hosting custom private servers (and happens to be Akamai’s client), became the first victim. During their investigation, researchers found many samples that were built for different architectures.
November 28, 2022  — 9 min read
Acronis
November 28, 2022  — 9 min read
AXLocker ransomware doesn’t change files’ extensions
AXLocker is a ransomware that was found by malware researcher ‘S!ri,’ who posted it on Twitter. Later, it was discovered that AXLocker does not only encrypt files but also steals victims’ Discord credentials and uploads them to its own Discord server. Specifically, the AXLocker ransomware steals tokens stored on a local computer when the user logs in to Discord. It’s not packed or obfuscated.
November 25, 2022  — 8 min read
Acronis
November 25, 2022  — 8 min read
Killnet ransomware — a wiper from the Chaos family
Killnet is a Russian hacker group, previously known for providing DDoS services. At the end of October 2022, the security channel PCrisk discovered the first sample of Killnet ransomware. The group, via a Telegram channel, also announced a ransomware attack on an Italian chemical factory.
September 22, 2022  — 9 min read
Acronis
September 22, 2022  — 9 min read
RapperBot: A new threat for IoT devices
On June 22, 2022, CNCERT IoT Threat Research Team and NSFOCUS FuYingLab monitored a new botnet that was attacking IoT devices. Naming the threat ‘RapperBot,’ researchers found more than 5,000 compromised hosts, but no attack commands were spotted. In analyzing samples, cybersecurity analytics found similarities with Mirai Bot, whose source code has been leaked.
September 15, 2022  — 4 min read
Acronis
September 15, 2022  — 4 min read
Is there a cyberconflict happening behind the scenes?
If you’re reading this, you’re somehow connected to the cyberworld that’s rapidly transforming the way the world functions. While this adaptation means an overall benefit to progressive societies, it opens new and innovative ways for cyberattackers to target organizations and consumers alike.
September 15, 2022  — 4 min read
Acronis
September 15, 2022  — 4 min read
CISO diaries: Why Patch Tuesday is a CISO’s best friend
The second Tuesday of every month is a day that should be marked on every cybersecurity professional’s calendar, as it marks Patch Tuesday. Patch Tuesday was started by Microsoft back in the Windows 98 era and brings monthly updates and a periodic glance at some of the biggest security exploits and vulnerabilities blighting our modern digital landscape.
August 29, 2022  — 4 min read
Acronis
August 29, 2022  — 4 min read
Acronis Cyberthreats Report: Ransomware dominates the threat landscape
Based on original research by the experts at our Cyber Protection Operation Centers, the Acronis Cyberthreats Report Mid-year 2022 explores key trends in cybersecurity and data protection, and offers actionable advice to help you stay safe against the rising tide of cybercrime activity.
August 25, 2022  — 9 min read
Acronis
August 25, 2022  — 9 min read
SideWinder uses weaponized Word documents to compromise victims’ machines
The SideWinder APT group was first discovered in 2018, and since earlier this year has been actively targeting military, defense and other industries in South Asia. They used to spread phishing emails with Word files that downloaded additional files to decode, drop and start the malware, which collects and uploads victims’ data to remote servers. They've since infected Android devices with malicious apps in Google Play.
August 16, 2022  — 11 min read
Acronis
August 16, 2022  — 11 min read
Hydrox: A new wiper attacks
Hydrox was first spotted by Twitter user Petrovich on July 29, 2022. On August 3, EnigmaSoft described this threat as a harmful malware that actually wipes users' data. This conclusion was made from a “ransom note” which didn’t actually contain any credentials or links for paying the ransom.
July 26, 2022  — 8 min read
Acronis
July 26, 2022  — 8 min read
Symbiote: A new stealthy malware for Linux
Symbiote is a new Linux malware that steals users’ data and provides a backdoor to threat actors. It was discovered in June, 2022 and is characterized as a very stealthy malware. It uses a lot of evasion techniques, such as hooking functions, capturing TCP traffic and hiding its own files. It collects users' data and exfiltrates it on DNS servers.