About Cybersecurity news Cyberthreat analysis Incident reports Industry insights

TRU Security

Updates from Acronis Threat Research Unit

Most recent on Cyberthreat analysis
June 18, 2025  — 21 min read
Acronis
Shadow Vector targets Colombian users via privilege escalation and court-themed SVG decoys
The Acronis Threat Research Unit (TRU) identified an ongoing malware campaign named Shadow Vector that...
June 04, 2025  — 17 min read
From open-source to open threat: Tracking Chaos RAT’s evolution
Chaos RAT is an open-source remote administration tool (RAT) first seen in 2022. It evolved in 2024,...
May 20, 2025  — 22 min read
From banks to battalions: SideWinder’s attacks on South Asia’s public sector
Acronis Threat Research Unit (TRU) uncovered a new SideWinder APT campaign targeting high-level...
April 15, 2025  — 17 min read
Astaroth unleashed
Astaroth, also known as Guildma, is a sophisticated piece of malware that first emerged in 2018 and...
February 13, 2025  — 8 min read
Advancements in delivery: Scripting with Nietzsche
We’ve recently come across a complex delivery chain utilizing multiple script languages designed to...
January 09, 2025  — 12 min read
SharpRhino: An old, new threat
SharpRhino is delivered as legitimate software and grants remote access to the victim's machine. Read...

Trends and analysis

February 06, 2023  — 8 min read
Acronis
DoubleZero: A data wiper deployed against Ukraine
The DoubleZero wiper — so named for its tactic of zeroing files — was first discovered on March 17,...
February 02, 2023  — 8 min read
Acronis
Vawtrak: A banking trojan with a long history
Vawtrak is a banking trojan — a form of malware that attempts to steal credentials from banks. It...
January 05, 2023  — 9 min read
Acronis
Royal ransomware’s actors make high demands
Royal ransomware was first spotted in January 2022, targeting different corporations. This group does...
December 09, 2022  — 9 min read
Acronis
KmsdBot: DDoS and cryptomining combined
On November 10, 2022, the Akamai Security Intelligence Response Team published an article with the...
November 28, 2022  — 9 min read
Acronis
AXLocker ransomware doesn’t change files’ extensions
AXLocker is a ransomware that was found by malware researcher ‘S!ri,’ who posted it on Twitter. Later,...
November 25, 2022  — 8 min read
Acronis
Killnet ransomware — a wiper from the Chaos family
Killnet is a Russian hacker group, previously known for providing DDoS services. At the end of October...