TRU Security

Updates from Acronis Threat Research Unit

Acronis
Fake adult websites pop realistic Windows Update screen to deliver stealers via ClickFix
Acronis TRU researchers have discovered an ongoing campaign that leverages a novel combination of screen hijacking techniques with ClickFix, displaying a realistic, full-screen Windows Update of “Critical Windows Security Updates” to trick victims into executing malicious commands.
Insights
November 18, 2025 — 3 min read
Acronis
Acronis Cyberthreats Update, November 2025
The Acronis Cyberthreats Update covers current cyberthreat activity and trends, as observed by Acronis...
November 10, 2025 — 22 min read
Acronis TRU Alliance {VirusTotal}: Tracking FileFix, Shadow Vector, and SideWinder
Introducing the Acronis TRU Alliance Series. This new series highlights collaborative research...
November 07, 2025 — 2 min read
MSP cybersecurity news digest, November 3, 2025
Qilin ransomware abuses Windows Subsystem for Linux to deploy Linux encryptors on Windows, Atroposia...
November 04, 2025 — 4 min read
MSP cybersecurity news digest, October 21, 2025
Here is the MSP cybersecurity news digest for October 21, 2025 from the Acronis Threat Research Unit...
October 28, 2025 — 3 min read
MSP cybersecurity news digest, October 28, 2025
Urgent WSUS RCE flaw actively exploited! Plus: Fake LastPass inheritance emails steal vaults, Iran's...
October 17, 2025 — 3 min read
Acronis Cyberthreats Update, October 2025
The Acronis Cyberthreats Update covers current cyberthreat activity and trends, as observed by Acronis...
September 29, 2025 — 5 min read
MSP cybersecurity news digest, September 29, 2025
Here is the Acronis Threat Research Unit (TRU) MSP cybersecurity news digest, September 29, 2025
September 23, 2025 — 6 min read
MSP cybersecurity news digest, September 23, 2025
Here is the weekly digest with news from Acronis TRU for the week of September 23, 2025
September 11, 2025 — 3 min read
Acronis Cyberthreats Update, September 2025
The Acronis Cyberthreats Update covers current cyberthreat activity and trends, as observed by Acronis...

Trends and analysis

October 09, 2020 — 4 min read
Acronis
Cyberthreat update from Acronis CPOCs: Week of October 5,...
Here at Acronis, we’re always monitoring for dangers to your data, deploying updates to handle...
October 02, 2020 — 4 min read
Acronis
Cyberthreat update from Acronis CPOCs: Week of September...
Here at Acronis, we’re always monitoring for dangers to your data, deploying updates to handle...
September 26, 2020 — 4 min read
Acronis
Cyberthreat update from Acronis CPOCs: Week of September...
Here at Acronis, we’re always monitoring for dangers to your data, deploying updates to handle...
September 20, 2020 — 8 min read
Acronis
Nefilim ransomware uses Citrix vulnerability to...
The Nefilim ransomware group, known to be active since February 2020, adopts the Nemty ransomware code...
September 19, 2020 — 4 min read
Acronis
Cyberthreat update from Acronis CPOCs: Week of September...
Here at Acronis, we’re always monitoring for dangers to your data, deploying updates to handle...
September 16, 2020 — 9 min read
Acronis
SunCrypt adopts attacking techniques from NetWalker and...
The SunCrypt ransomware family was first spotted in October 2019, but it was not very active at that...