TRU Security

Updates from Acronis Threat Research Unit

Acronis
Threat actors go gaming: Electron-based stealers in disguise
The Acronis Threat Research Unit (TRU) uncovered a new malware campaign involving Leet Stealer, RMC Stealer (a modified version of Leet Stealer) and Sniffer Stealer.
Insights
August 11, 2025 — 3 min read
Acronis
Acronis Cyberthreats Update, August 2025
The Acronis Cyberthreats Update covers current cyberthreat activity and trends, as observed by Acronis...
August 05, 2025 — 4 min read
MSP cybersecurity news digest, July 29, 2025
Benign-appearing panda images used by new Koske Linux malware to deliver malicious code, Turkish...
August 04, 2025 — 19 min read
MSPs a top target for Akira and Lynx ransomware
Acronis Threat Research Unit (TRU) analyzed recent samples of Akira and Lynx ransomware families to...
July 24, 2025 — 4 min read
MSP cybersecurity news digest, July 14, 2025
SafePay inflicts major ransomware attack on Ingram Micro, Oyster malware loader spread through SEO...
July 16, 2025 — 4 min read
MSP cybersecurity news digest, July 7, 2025
Zurich nonprofit Radix hit by Sarcoma ramsomware group, resulting in theft of 1.3TB of data, Google...
July 14, 2025 — 3 min read
Acronis Cyberthreats Update, July 2025
The Acronis Cyberthreats Update covers current cyberthreat activity and trends, as observed by Acronis...
June 30, 2025 — 4 min read
MSP cybersecurity news digest, June 30, 2025
ConnectWise ScreenConnect installer exploited by authenticode stuffing technique, attackers breach...
June 23, 2025 — 4 min read
MSP cybersecurity news digest, June 18, 2025
Zero-day flaw and 66 vulnerabilities addressed in Microsoft’s June 2025 Patch Tuesday, Malware...
June 17, 2025 — 4 min read
MSP cybersecurity news digest, June 9, 2025
FBI reports 900 organizations in the Americas and Europe hit by Play ransomware since October 2023,...

Trends and analysis

January 10, 2024 — 12 min read
Acronis
CustomLoader: A malicious link
CustomerLoader was first spotted in June 2023, delivering different payloads to its targets. It is a...
December 12, 2023 — 4 min read
Acronis
Acronis Cyberthreats Update, December 2023
The Acronis Cyberthreats Update covers current cyberthreat activity and trends, as observed by Acronis...
November 15, 2023 — 10 min read
Acronis
Ransomware diaries, part 1: QazLocker -Cyb3rK1dZ has more...
This article is the first in the ransomware diaries series. We will provide an in-depth look at some...
November 06, 2023 — 4 min read
Acronis
Acronis Cyberthreats Update, November 2023
The Acronis Cyberthreats Update covers current cyberthreat activity and trends, as observed by Acronis...
November 02, 2023 — 2 min read
Acronis
AV-Test results: Acronis Cyber Protect Cloud scores 10/10...
AV-Test unveiled their Advanced Threat Protection test results for 10 real-life scenarios they ran in...
October 25, 2023 — 18 min read
Acronis
Ursnif, the banking trojan
Ursnif, also known as Gozi or Dreambot, is a banking trojan. Ursnif is typically delivered via...