--- title: Latest stories from MSP Threats Security Team description: Stay up to date with the latest cybersecurity and cyber protection news, research, vulnerabilities, threats and computer attacks. canonical_url: https://www.acronis.com/en/blog/authors/acronis-security-team/page/3/ locale: en last_updated: 2026-10-27 --- [Acronis Blog](https://www.acronis.com/en/blog/) [Authors](https://www.acronis.com/en/blog/authors/) MSP Threats Security Team ![Image 1: MSP Threats Security Team](https://staticfiles.acronis.com/images/content/1578b8dff96325855c4525d865e7fc63.png) MSP Threats Security Team # Latest stories from MSP Threats Security Team [27 April 2020 — 3 min read Acronis Blog ![Image 2: Acronis Earns Second Place in AMTSO Cryptojackers Detection Test, Beating Many Leading Endpoint Cybersecurity Solutions](https://staticfiles.acronis.com/images/blog-cover/18a373b02d45b7c3ed01a5efacfff718.png) Importance of self-defense in cybersecurity software proven yet again At Acronis, we’ve taken the ability for security software to defend itself seriously right from the start. In 2017 and 2018, our solutions were tested for self-defense capabilities by independent labs, and their research revealed Acronis Cyber Protection Solutions delivered excellent results. Of course, we continue to improve our technologies with every release and constantly research what we can improve in all aspects of cyber protection. Given our mission of delivering cyber protection solutions that ensure the safety, accessibility, privacy, authenticity, and security (SAPAS) of data, in preparing for our upcoming Acronis Cyber Platform launch, we improved the self-defense capabilities even further.](https://www.acronis.com/en/blog/posts/importance-self-defense-cybersecurity-software-proven-yet-again/) [15 April 2020 — 3 min read Acronis Blog ![Image 3: Ransomware Attack Costs $1.5 Million in Riviera Beach, FL](https://staticfiles.acronis.com/images/blog-cover/e44479aa9902652a121944102811a7bd.png) 100% Detection Rate, Zero False Alarms: Independent Lab Tests Acronis Cyber Platform AV-Test, the leading security institute known for putting anti-malware solutions through their paces, recently completed its examination of Acronis Cyber Platform – our new cyber protection product being released later this month, which delivers a unique integration of backup with full-stack next-generation anti-malware protection and comprehensive endpoint management tools. The results are in from AV-Test and Acronis Cyber Platform performed tremendously well.](https://www.acronis.com/en/blog/posts/100-detection-rate-zero-false-alarms-independent-lab-tests-acronis-cyber-protect-cloud/) [08 April 2020 — 3 min read Acronis Blog ![Image 4: Acronis Earns Second Place in AMTSO Cryptojackers Detection Test, Beating Many Leading Endpoint Cybersecurity Solutions](https://staticfiles.acronis.com/images/blog-cover/18a373b02d45b7c3ed01a5efacfff718.png) As COVID-19 Spreads, So Do Ransomware and Cryptomining Attacks In light of the unfortunate and devastating spread of the COVID-19 pandemic – and the spike in cyberattacks in its wake – the need for cyber protection is even clearer. That need is particularly acute for the people and companies who had fallen behind in the cybersecurity race due to budget constraints or lack of attention. Now that individuals are deeply stressed, cybercriminals are using every angle of attack, including playing on the natural fear of COVID-19 and the desperate search for information. In the last two weeks, Acronis has seen a significant increase in cryptojacking, while ransomware attacks are growing rapidly as well.](https://www.acronis.com/en/blog/posts/covid-19-spreads-so-do-ransomware-and-cryptomining-attacks/) [10 February 2020 — 6 min read Acronis Blog ![Image 5: Syrk Ransomware Delivers Encryption Payload via PowerShell Script](https://staticfiles.acronis.com/images/blog-cover/701297a7531d17743bf6f7c5f50e97c8.png) Snake/EKANS Ransomware Attacks Industrial Control Systems: Acronis Stops It Ransomware continues to be an active, evolving threat and one of the newest strains to emerge is Snake (also known as EKANS, which is simply “Snake” spelled backward). First appearing at the end of December last year, the most interesting feature of Snake is that it targets industrial control systems (ICS) environments – not the individual machines, but the entire network. Designed to terminate specific processes on victim machines, including multiple items related to ICS operations, it also deletes Volume Shadow Copies to eliminate Window backups. While there is currently no decryption available, systems running Acronis Active Protection – the AI-based anti-malware defense that is integrated into our cyber protection solutions – successfully detects Snake ransomware as a zero-day attack and stops it in its tracks.](https://www.acronis.com/en/blog/posts/snakeekans-ransomware-attacks-industrial-control-systems-acronis-stops-it/) [27 November 2019 — 2 min read Acronis Blog ![Image 6: Acronis Earns Second Place in AMTSO Cryptojackers Detection Test, Beating Many Leading Endpoint Cybersecurity Solutions](https://staticfiles.acronis.com/images/blog-cover/18a373b02d45b7c3ed01a5efacfff718.png) Ryuk Ransomware Strikes Again: Second Outbreak Hits Louisiana Ryuk ransomware continues to wreak havoc – and one U.S. state in particular recently suffered from another successful attack that likely could have been prevented. Several school districts and government offices in Louisiana were hit by an attack this summer. Unfortunately, the story was just repeated as several state agencies fell victim to another attack on November 18. In this case, the cyberattack shut down systems in the governor’s office, the Department of Motor Vehicles, the Department of Health, and The Department of Children and Family Services.](https://www.acronis.com/en/blog/posts/ryuk-ransomware-strikes-again-second-outbreak-hits-louisiana/) [18 October 2019 — 9 min read Acronis Blog ![Image 7: Modular Cryptojackers Now Deliver Illicit Cryptomining to Cover Multiple Platforms at Once](https://staticfiles.acronis.com/images/blog-cover/8d171c9d5dce1ca04801e22dc732de75.png) HILDACRYPT: A Ransomware Newcomer Hits Backup and Anti-virus Solutions A new ransomware family was discovered in August 2019. Called HILDACRYPT, it is named after the Netflix cartoon “Hilda” because the TV show’s YouTube trailer was included in the ransom note of the original version of the malware. HILDACRYPT camouflages itself as a legitimate XAMPP installer, which is an easy to install Apache distribution containing MariaDB, PHP, and Perl. However, the cryptolocker’s file name ‘xamp’ differs from the legitimate version. Moreover, the ransomware file does not have a digital signature. We took a deep dive into this new cyberthreat to show how it works and how you can help overcome its attack with Acronis Cyber Backup.](https://www.acronis.com/en/blog/posts/hildacrypt-ransomware-newcomer-hits-backup-and-anti-virus-solutions/) [07 October 2019 — 17 min read Acronis Blog ![Image 8: Ransomware Attack Costs $1.5 Million in Riviera Beach, FL](https://staticfiles.acronis.com/images/blog-cover/e44479aa9902652a121944102811a7bd.png) Threat Analysis: Nemty Ransomware and the Fake PayPal Site We took a deep dive into the Nemty ransomware strain, a sophisticated new form of malware that's spreading via a fake PayPal website. Similar in some aspects to Buran and GandCrab ransomware strains, Nemty incorporates three distinct layers of encryption to lock down victim data. Learn how this threat to your system works and how Acronis can help you evade and overcome it.](https://www.acronis.com/en/blog/posts/threat-analysis-nemty-ransomware-and-fake-paypal-site/) [24 September 2019 — 6 min read Acronis Blog ![Image 9: Syrk Ransomware Delivers Encryption Payload via PowerShell Script](https://staticfiles.acronis.com/images/blog-cover/701297a7531d17743bf6f7c5f50e97c8.png) Syrk Ransomware Delivers Encryption Payload via PowerShell Script We took a deep dive into the insidious Syrk ransomware strain that targets young Fortnite players to deliver a debilitating encryption payload complete with Cryptolocker anti-monitoring and self-defense capabilities. Learn how this threat to your system works and how Acronis can help you overcome it to keep your files safe.](https://www.acronis.com/en/blog/posts/syrk-ransomware-delivers-encryption-payload-powershell-script/) [30 August 2019 — 3 min read Acronis Blog ![Image 10: Acronis Earns Second Place in AMTSO Cryptojackers Detection Test, Beating Many Leading Endpoint Cybersecurity Solutions](https://staticfiles.acronis.com/images/blog-cover/18a373b02d45b7c3ed01a5efacfff718.png) Acronis Earns Second Place in AMTSO Cryptojackers Detection Test, Beating Many Leading Endpoint Cybersecurity Solutions Cryptojacking – or illicit cryptomining – continues to be a major headache for companies and home users, with research showing that cybercriminals made an impressive $52.7 million by mining digital coins on victims’ machines during the first half of 2019. NioGuard Security Lab, a member of Anti-Malware Testing Standard Organization (AMTSO), researched the matter and just posted a report that examines the level of protection against cryptojacking offered by leading endpoint security providers. The results might shock some observers because Acronis, which now defends against illicit mining in its data protection solutions, outperformed the vast majority of leading endpoint security providers.](https://www.acronis.com/en/blog/posts/acronis-earns-second-place-amtso-cryptojackers-detection-test-beating-many-leading-endpoint/) [16 August 2019 — 14 min read Acronis Blog ![Image 11: Meet Buran: The New Delphi Ransomware Delivered via RIG Exploit Kit](https://staticfiles.acronis.com/images/blog-cover/bd62a55daae50fdec0d6a6b238034607.png) Meet Buran: The New Delphi Ransomware Delivered via RIG Exploit Kit Buran is a new version of the Vega ransomware strain (a.k.a. Jamper, Ghost, Buhtrap) that attacked accountants from February through April 2019. The new Buran ransomware first was discovered in June 2019. What’s interesting is that this cryptolockers’ code was written in Object Pascal in Delphi IDE – a programming language that was popular in Latin American and former Soviet Union countries around two decades ago when it was being taught in colleges and technical universities. Let’s take a close look at this ransomware to find out the installation process, communication details, and encryption model.](https://www.acronis.com/en/blog/posts/meet-buran-new-delphi-ransomware-delivered-rig-exploit-kit/) [11 July 2019 — 5 min read Acronis Blog ![Image 12: Modular Cryptojackers Now Deliver Illicit Cryptomining to Cover Multiple Platforms at Once](https://staticfiles.acronis.com/images/blog-cover/8d171c9d5dce1ca04801e22dc732de75.png) Modular Cryptojackers Now Deliver Illicit Cryptomining to Cover Multiple Platforms at Once Cryptojacking attacks are not going away any time soon. Instead, they’re becoming more sophisticated – and more dangerous – by using advanced modular malware with worm capabilities as a delivery mechanism. A complex backdoor, called Plurox, was recently discovered by MalwareHunterTeam. It has a pluggable architecture and is able to spread itself over a local network, with the help of the EternalBlue exploit, and start cryptominers downloaded from the command and control (C&C) server.](https://www.acronis.com/en/blog/posts/modular-cryptojackers-now-deliver-illicit-cryptomining-cover-multiple-platforms-once/) [24 June 2019 — 3 min read Acronis Blog ![Image 13: Ransomware Attack Costs $1.5 Million in Riviera Beach, FL](https://staticfiles.acronis.com/images/blog-cover/e44479aa9902652a121944102811a7bd.png) Ransomware Attack Costs $1.5 Million in Riviera Beach, FL The city of Riviera Beach, Florida made news recently when it announced it was paying approximately $600,000 in ransom to undo a ransomware attack it suffered in late May. In addition to the ransom paid, officials also invested more than $900,000 into new hardware in the hopes that they do not have the same vulnerabilities as the old ones. That’s $1.5 million in damages from one attack.](https://www.acronis.com/en/blog/posts/ransomware-attack-costs-15-million-riviera-beach-fl/) [1](https://www.acronis.com/en/blog/authors/acronis-security-team/page/1/) [2](https://www.acronis.com/en/blog/authors/acronis-security-team/page/2/) [3](https://www.acronis.com/en/blog/authors/acronis-security-team/page/3/) [4](https://www.acronis.com/en/blog/authors/acronis-security-team/page/4/) [5](https://www.acronis.com/en/blog/authors/acronis-security-team/page/5/)