Back to homepage
Search in acronis websites
Try Now

Acronis Blog

Acronis Blog
Cybersecurity

Most recent on Cybersecurity

November 08, 2026 — 3 min read
Acronis researchers uncover AI attack mesh targeting emergency services
November 08, 2026 — 3 min read
Acronis researchers uncover AI attack mesh targeting emergency services
A new Acronis TRU investigation exposes BOSSAI, an attack operation in which one person coordinated 12 AI agents against targets across 11 countries. Learn what the campaign reveals about AI-assisted intrusions, commercial model safeguards and the risks of trusting automated findings.
June 15, 2021 — 2 min read
Catching a wave: Exploring the hosting industry’s rapid growth
June 15, 2021 — 2 min read
Catching a wave: Exploring the hosting industry’s rapid growth
If you think the web hosting services business is maturing, flattening, maybe getting stale, think again. Last year, the global hosting market generated a robust $75 billion in revenues despite a modest slowdown attributed to the pandemic. In 2021, its growth is accelerating again, forecast to grow to $267 billion by 2028, according to Fortune Business Insights. That is a rocket worth catching a ride on.
June 10, 2021 — 3 min read
Stop email cyberthreats with Advanced Email Security
June 10, 2021 — 3 min read
Stop email cyberthreats with Advanced Email Security
94% of all malware and 96% of all social engineering attacks today are delivered through email. For managed service providers (MSPs), that makes email security a top priority but responding to this threat takes more than just adding a new cybersecurity tool to build services on top of.
June 09, 2021 — 3 min read
What is data integrity?
June 09, 2021 — 3 min read
What is data integrity?
Data integrity refers to the information stored in any type of database or data center that is accurate, complete, consistent, and reliable, no matter how long it is stored or how often it is accessed. Maintaining data integrity means ensuring data remains intact, searchable, and recoverable over the course of its lifecycle. It is the job of data protection solutions to ensure data integrity by protecting sensitive and business-critical information from external and internal threats.
June 08, 2021 — 3 min read
What’s a live ransomware attack look like? Take a look
June 08, 2021 — 3 min read
What’s a live ransomware attack look like? Take a look
In the wake of the Colonial Pipeline breach and the JBS attack, ransomware has recaptured everyone’s attention – including your management. See what happens when malware threatens the family road trip or backyard barbecue. That makes it an opportune moment to upgrade your understanding of how ransomware attacks work, and revisit your strategies for protecting your company’s data and uptime against this most destructive and increasingly widespread malware threats. Acronis is giving you two excellent chances to do just that.
June 04, 2021 — 5 min read
Threat analysis: DoppelPaymer ransomware
June 04, 2021 — 5 min read
Threat analysis: DoppelPaymer ransomware
DoppelPaymer is a successor of BitPaymer ransomware, and is part of the Dridex malware family. It’s currently being distributed in various forms, including phishing or spam emails with attached documents that are embedded with malicious code — either JavaScript or VBScript. On execution, this code downloads DoppelPaymer’s first-stage loader on the victim’s machine. The attackers then use the PowerShell Empire toolkit to run a brute-force attack on Active Directory. The Mimikatz module is used to dump passwords from the system memory.
June 04, 2021 — 5 min read
Threat analysis: Pysa (Mespinoza) ransomware
June 04, 2021 — 5 min read
Threat analysis: Pysa (Mespinoza) ransomware
Pysa takes an approach commonly referred to as “big game hunting,” meaning that the ransomware group targets high-value assets in organizations that are particularly sensitive to data loss or system downtime. The idea is that victims — which may include healthcare providers, government agencies, and managed service providers — are more likely to quickly pay the ransom, regardless of its cost.
June 04, 2021 — 8 min read
Conti ransomware shuts down backup services and unlocks files with Windows Restart Manager
June 04, 2021 — 8 min read
Conti ransomware shuts down backup services and unlocks files with Windows Restart Manager
Conti ransomware shuts down backup services and unlocks files with Windows Restart Manager before encryption.
June 04, 2021 — 2 min read
Shlayer malware Analysis and Detection
June 04, 2021 — 2 min read
Shlayer malware Analysis and Detection
The first examples of the Shlayer malware family were discovered in February 2018. Since then, it has become the most popular macOS first-stage trojan-downloader. Shlayer remotely installs other malicious or potentially unwanted applications such as Cimpli, Bnodlero, Geonei, and Pirrit adware for macOS X desktops and laptops, mostly targeting US-based users. Once installed, the adware collects the victim’s personal data and tracks browsing activities that can be used to target additional ads. This newest version of the trojan leverages a Python script for stealthier execution of the malicious payload and employs data encryption for communications with its external command and control (C&C) server. The Python script and crypto library are delivered inside of the trojan’s DMG installer.
June 04, 2021 — 8 min read
Sekhmet ransomware Analysis
June 04, 2021 — 8 min read
Sekhmet ransomware Analysis
Sekhmet ransomware, which first appeared in March 2020, has already disclosed the stolen data from at least six victims to date. One recent known attack that occurred on 20 June 2020 targeted SilPac, a gas handling solutions company based in Santa Clara, California.
June 04, 2021 — 7 min read
Analysis of Ragnar Locker Ransomware
June 04, 2021 — 7 min read
Analysis of Ragnar Locker Ransomware
The threat actor begin the attack by compromising the company’s network via RDP service, using brute force to guess weak passwords or with stolen credentials bought on the Dark Web. Next, the attacker performs second-stage reconnaissance. To elevate privileges, the attacker exploits the CVE-2017-0213 vulnerability in the Windows COM Aggregate Marshaler to run arbitrary code with elevated privileges.
June 03, 2021 — 2 min read
TAG Cyber names Acronis Distinguished Vendor in Q2 2021 Security Annual
June 03, 2021 — 2 min read
TAG Cyber names Acronis Distinguished Vendor in Q2 2021 Security Annual
Acronis has been named a TAG Cyber Distinguished Vendor in 2021, and part of the benefits of this designation include being featured in the firm’s flagship “Security Annual” quarterly reports. To this end, TAG Cyber’s Q2’21 report was recently published. The report is, for a lack of a better word, a “beast.” It is over 100 pages long and includes 10 op-eds, 13 interviews with industry executives, and five technical whitepapers. While we certainly recommend the entire thing, we also know your time may be limited. That’s why we made a summary of the report that streamlined the content that was most relevant to the Acronis community. Let's take a quick look at what's included.
June 01, 2021 — 3 min read
Will liability waivers help when clients won’t pay for cybersecurity?
June 01, 2021 — 3 min read
Will liability waivers help when clients won’t pay for cybersecurity?
The rise in cberthreats requires MSPs to make the cybersecurity of their clients a top priority. But what happens when an existing client or a prospect doesn’t think their business is at risk – and they don’t want to enforce the policies or pay for preventative measures you know will keep them secure? Many experts recommend using liability waivers to reduce the risk to your business when stubborn clients refuse to get on board with security. Sometimes, just presenting a waiver can get clients to realize the severity of the risk.