---
title: Acronis Blog
description: Stay up to date with the latest cybersecurity and cyber protection news, research, vulnerabilities, threats and computer attacks.
canonical_url: https://www.acronis.com/en/blog/categories/endpoint-protection/page/17/
locale: en
last_updated: 2026-10-27
---

# Acronis Blog

[Acronis Blog](https://www.acronis.com/en/blog/)

Endpoint protection

# Most recent on Endpoint protection

[![Image 1: Managed threat detection and response: a 2026 buyer's guide](https://staticfiles.acronis.com/images/blog-cover/535ca6668f5f12f75fab19830090c9a8.png) 27 August 2026 — 10 min read Managed threat detection and response: a 2026 buyer's guide A 2026 buyer's guide to managed threat detection and response services, covering endpoint, cloud, identity and application layers, plus how to evaluate MDR.](https://www.acronis.com/en/blog/posts/managed-threat-detection-and-response-services-buyers-guide-2026/)

[28 July 2021 — 6 min read ![Image 2: #BHUSA or bust: Hopes and expectations for Black Hat 2021](https://staticfiles.acronis.com/images/blog-cover/f62a350b7e35dfe1e3dd057a635af90b.png) #BHUSA or bust: Hopes and expectations for Black Hat 2021 Since 1997, Black Hat has been a staple in the world of cybersecurity conferences. Having been in cybersecurity for nearly a decade, I’ve been aware of Black Hat, but haven’t had the opportunity to attend. Sure, I’ve attended DEF CON and some local cybersecurity conferences, but never one with a corporate focus.](https://www.acronis.com/en/blog/posts/bhusa-or-bust-hopes-and-expectations-black-hat-2021/)

[05 July 2021 — 7 min read ![Image 3: TAG Cyber names Acronis Distinguished Vendor in Q2 2021 Security Annual](https://staticfiles.acronis.com/images/blog-cover/701297a7531d17743bf6f7c5f50e97c8.png) REvil ransomware supply chain attack against MSPs Just as people were starting to forget about the huge Solar Winds software supply-chain attack, another high-profile attack happens. This time, the REvil/Sodinokibi ransomware group pushed out a malicious update for Kaseya's VSA IT management software, leading to dozens of MSPs around the globe – and subsequently their customers – being compromised by ransomware. The global network of Acronis Cyber Protection Operation Centers (CPOCs) is monitoring the situation, as additional details of the attack are still unraveling. Here’s what we know at this point.](https://www.acronis.com/en/blog/posts/revil-ransomware-supply-chain-attack-against-msps/)

[04 July 2021 — 2 min read ![Image 4: Threat analysis: DoppelPaymer ransomware](https://staticfiles.acronis.com/images/blog-cover/18a373b02d45b7c3ed01a5efacfff718.png) Cyberattack group REvil attacks MSPs and their clients in a supply-side attack Managed service providers (MSPs) are on alert this holiday weekend as those that run Kaseya VSA software are being informed by the company to shut down their on-premises VSA servers following a suspected supply-chain attack on their remote management software. Kaseya proactively shut down their SaaS servers that run VSA for their partners.](https://www.acronis.com/en/blog/posts/cyberattack-group-revil-attacks-msps-and-their-clients-supply-side-attack/)

[24 June 2021 — 10 min read ![Image 5: What is anti-malware software and how does it work?](https://staticfiles.acronis.com/images/blog-cover/76c014bcae8e0fc029c829eecb20c0d3.png) What is anti-malware software and how does it work? Cybercriminals are using the most advanced technologies to gain access to your system(s) and steal your sensitive and private data for financial gain. To keep up, cybersecurity vendors are working hard to incorporate these same technologies to stop these modern-day attacks. Whether you are a consumer or business, this article will help you better understand what malware is and what you can do to stop these continued attacks](https://www.acronis.com/en/blog/posts/anti-malware-software/)

[04 June 2021 — 5 min read ![Image 6: Threat analysis: DoppelPaymer ransomware](https://staticfiles.acronis.com/images/blog-cover/18a373b02d45b7c3ed01a5efacfff718.png) Threat analysis: DoppelPaymer ransomware DoppelPaymer is a successor of BitPaymer ransomware, and is part of the Dridex malware family. It’s currently being distributed in various forms, including phishing or spam emails with attached documents that are embedded with malicious code — either JavaScript or VBScript. On execution, this code downloads DoppelPaymer’s first-stage loader on the victim’s machine. The attackers then use the PowerShell Empire toolkit to run a brute-force attack on Active Directory. The Mimikatz module is used to dump passwords from the system memory.](https://www.acronis.com/en/blog/posts/doppelpaymer-ransomware/)

[04 June 2021 — 5 min read ![Image 7: Will liability waivers help when clients won’t pay for cybersecurity?](https://staticfiles.acronis.com/images/blog-cover/e44479aa9902652a121944102811a7bd.png) Threat analysis: Pysa (Mespinoza) ransomware Pysa takes an approach commonly referred to as “big game hunting,” meaning that the ransomware group targets high-value assets in organizations that are particularly sensitive to data loss or system downtime. The idea is that victims — which may include healthcare providers, government agencies, and managed service providers — are more likely to quickly pay the ransom, regardless of its cost.](https://www.acronis.com/en/blog/posts/pysa-ransomware/)

[04 June 2021 — 8 min read ![Image 8: Conti ransomware shuts down backup services and unlocks files with Windows Restart Manager](https://staticfiles.acronis.com/images/blog-cover/30ed349a67c19cf8c26685d868f90f47.png) Conti ransomware shuts down backup services and unlocks files with Windows Restart Manager Conti ransomware shuts down backup services and unlocks files with Windows Restart Manager before encryption.](https://www.acronis.com/en/blog/posts/conti-ransomware/)

[04 June 2021 — 2 min read ![Image 9: Shlayer malware Analysis and Detection](https://staticfiles.acronis.com/images/blog-cover/bd62a55daae50fdec0d6a6b238034607.png) Shlayer malware Analysis and Detection The first examples of the Shlayer malware family were discovered in February 2018. Since then, it has become the most popular macOS first-stage trojan-downloader. Shlayer remotely installs other malicious or potentially unwanted applications such as Cimpli, Bnodlero, Geonei, and Pirrit adware for macOS X desktops and laptops, mostly targeting US-based users. Once installed, the adware collects the victim’s personal data and tracks browsing activities that can be used to target additional ads. This newest version of the trojan leverages a Python script for stealthier execution of the malicious payload and employs data encryption for communications with its external command and control (C&C) server. The Python script and crypto library are delivered inside of the trojan’s DMG installer.](https://www.acronis.com/en/blog/posts/shlayer-malware/)

[04 June 2021 — 8 min read ![Image 10: Sekhmet ransomware Analysis](https://staticfiles.acronis.com/images/blog-cover/8d171c9d5dce1ca04801e22dc732de75.png) Sekhmet ransomware Analysis Sekhmet ransomware, which first appeared in March 2020, has already disclosed the stolen data from at least six victims to date. One recent known attack that occurred on 20 June 2020 targeted SilPac, a gas handling solutions company based in Santa Clara, California.](https://www.acronis.com/en/blog/posts/sekhmet-ransomware/)

[04 June 2021 — 7 min read ![Image 11: TAG Cyber names Acronis Distinguished Vendor in Q2 2021 Security Annual](https://staticfiles.acronis.com/images/blog-cover/701297a7531d17743bf6f7c5f50e97c8.png) Analysis of Ragnar Locker Ransomware The threat actor begin the attack by compromising the company’s network via RDP service, using brute force to guess weak passwords or with stolen credentials bought on the Dark Web. Next, the attacker performs second-stage reconnaissance. To elevate privileges, the attacker exploits the CVE-2017-0213 vulnerability in the Windows COM Aggregate Marshaler to run arbitrary code with elevated privileges.](https://www.acronis.com/en/blog/posts/ragnar-locker/)

[03 June 2021 — 2 min read ![Image 12: TAG Cyber names Acronis Distinguished Vendor in Q2 2021 Security Annual](https://staticfiles.acronis.com/images/blog-cover/701297a7531d17743bf6f7c5f50e97c8.png) TAG Cyber names Acronis Distinguished Vendor in Q2 2021 Security Annual Acronis has been named a TAG Cyber Distinguished Vendor in 2021, and part of the benefits of this designation include being featured in the firm’s flagship “Security Annual” quarterly reports. To this end, TAG Cyber’s Q2’21 report was recently published. The report is, for a lack of a better word, a “beast.” It is over 100 pages long and includes 10 op-eds, 13 interviews with industry executives, and five technical whitepapers. While we certainly recommend the entire thing, we also know your time may be limited. That’s why we made a summary of the report that streamlined the content that was most relevant to the Acronis community. Let's take a quick look at what's included.](https://www.acronis.com/en/blog/posts/tag-cyber-names-acronis-distinguished-vendor-q2-2021-security-annual/)

[01 June 2021 — 3 min read ![Image 13: Will liability waivers help when clients won’t pay for cybersecurity?](https://staticfiles.acronis.com/images/blog-cover/e44479aa9902652a121944102811a7bd.png) Will liability waivers help when clients won’t pay for cybersecurity? The rise in cberthreats requires MSPs to make the cybersecurity of their clients a top priority. But what happens when an existing client or a prospect doesn’t think their business is at risk – and they don’t want to enforce the policies or pay for preventative measures you know will keep them secure? Many experts recommend using liability waivers to reduce the risk to your business when stubborn clients refuse to get on board with security. Sometimes, just presenting a waiver can get clients to realize the severity of the risk.](https://www.acronis.com/en/blog/posts/will-liability-waivers-help-when-clients-wont-pay-cybersecurity/)

[1](https://www.acronis.com/en/blog/categories/endpoint-protection/page/1/)...[15](https://www.acronis.com/en/blog/categories/endpoint-protection/page/15/)  
[16](https://www.acronis.com/en/blog/categories/endpoint-protection/page/16/)  
[17](https://www.acronis.com/en/blog/categories/endpoint-protection/page/17/)  
[18](https://www.acronis.com/en/blog/categories/endpoint-protection/page/18/)  
[19](https://www.acronis.com/en/blog/categories/endpoint-protection/page/19/)...[82](https://www.acronis.com/en/blog/categories/endpoint-protection/page/82/)