Back
February 14, 2022  —  Eric Swotinsky
Incident reports

Fake Windows 11 'upgrade' sites spread RedLine infostealer

Acronis Cyber Protect Cloud
for service providers
View Live Demo

There are over one billion Windows 10 users that will eventually need to upgrade to Windows 11, but due to hardware issues, not everyone has a direct upgrade path.

Threat actors are well aware of this fact, and are capitalizing on it. We're seeing many fake upgrade sites pop up, disguising themselves as legitimate Microsoft sites and offering "upgrades" — but actually spreading the popular infostealer RedLine via the Discord CDN.

You can protect your passwords, browser cookies, cryptocurrency, and credit card information with Acronis Cyber Protect. Its AI-powered and behavioral detection engines recognize threats like RedLine and stop them in their tracks. 

Eric Swotinsky

About Acronis

Acronis is a Swiss company, founded in Singapore. Celebrating two decades of innovation, Acronis has more than 1,800 employees in 45 locations. The Acronis Cyber Protect Cloud solution is available in 26 languages in over 150 countries and is used by 20,000 service providers to protect over 750,000 businesses.

Cybersecurity Cyber protection Malware protection Cyberthreats

More from Acronis

November 16, 2023  — 13 min read
Acronis
November 16, 2023  — 13 min read
DarkGate relies on malicious AutoIt scripts
DarkGate was first spotted in 2018. New attacks have used Skype messages with malicious VBA attachments. The main purpose of this script is to download and execute the AutoIt script, which has been observed in DarkGate campaigns since 2020. A user with the name ‘RastaFarEye’ advertised his malware on underground Russian language forums, and it now has numerous capabilities.
November 15, 2023  — 10 min read
Acronis
November 15, 2023  — 10 min read
Ransomware diaries, part 1: QazLocker -Cyb3rK1dZ has more time than skills
This article is the first in the ransomware diaries series. We will provide an in-depth look at some active ransomware families, such as Mallox or encryptors from the Epsilon Gang, revealing the unique picture they occasionally paint, along with commonalities they maintain along the way. Every family will represent a different piece of the current ransomware landscape to showcase how diversified it has become over the years.
November 06, 2023  — 4 min read
Acronis
November 06, 2023  — 4 min read
Acronis Cyberthreats Update, November 2023
The Acronis Cyberthreats Update covers current cyberthreat activity and trends, as observed by Acronis analysts and sensors. Figures presented here were gathered in October of this year and reflect threats that we detected as well as news stories from the public domain. This report represents a global outlook and is based on more than one million unique endpoints distributed around the world.
November 02, 2023  — 2 min read
Acronis
November 02, 2023  — 2 min read
AV-Test results: Acronis Cyber Protect Cloud scores 10/10 in Advanced Threat Protection
AV-Test unveiled their Advanced Threat Protection test results for 10 real-life scenarios they ran in July and August 2023 in Windows 10 Professional. Once again, Acronis Cyber Protect Cloud with Advanced Security received the best possible score, successfully detecting and blocking all 10 attacks in their early stages.