--- title: Acronis defends against every attack in AV-TEST's Real-World ATP evaluation description: Acronis Cyber Platform once again has been recognized by AV-TEST for outstanding endpoint protection performance, achieving a perfect score in the March–April 2025 Advanced Threat Protection (ATP) test. canonical_url: https://www.acronis.com/en/blog/posts/acronis-defends-against-every-attack-in-av-tests-real-world-atp-evaluation/ locale: en last_updated: 2026-10-27 --- [Acronis Blog](https://www.acronis.com/en/blog/) # Acronis defends against every attack in AV-TEST's Real-World ATP evaluation Acronis Cyber Platform once again has been recognized by AV-TEST for outstanding endpoint protection performance, achieving a perfect score in the March–April 2025 Advanced Threat Protection (ATP) test. [Try Now](https://www.acronis.com/en/products/cloud/trial/) [![Image 2: Acronis Editorial Team](https://staticfiles.acronis.com/images/content/d85707ae91461544212d39836dc32b42.png)](https://www.acronis.com/en/blog/authors/acronis/ "Acronis Editorial Team") [Acronis Editorial Team](https://www.acronis.com/en/blog/authors/acronis/) 3 min read Last updated 17 July 2025 [Acronis Cyber Platform (formerly Acronis Cyber Protect Cloud)](https://products/cloud/cyber-protect/?utm_source=google&utm_medium=cpc&utm_campaign=MF-X-X-Cloud-Americas-NAM-EN-MQL-CloudSEMb-MSPcloud-G-PS&gad_source=1&gad_campaignid=897344085&gbraid=0AAAAAD7eew8-Dz4rJNpNPp9jnWEFuP_5g&gclid=CjwKCAjwvuLDBhAOEiwAPtF0VmOHVT7ugBV7MjYakW3QT1j4bgRmA57YBC7sm_c_6LAECxXxjoKeCxoCn5AQAvD_BwE) once again has been recognized by AV-TEST for outstanding endpoint protection performance, achieving a perfect score in the March–April 2025 Advanced Threat Protection (ATP) test. This latest evaluation focused on stopping fileless malware attacks, using scenarios built around MSBuild (Microsoft Build Engine), a trusted Windows utility often abused by attackers. ## What made this test different This wasn’t a standard [malware detection](https://www.acronis.com/en/blog/posts/how-to-detect-malware/) test. The AV-TEST ATP series simulates realistic attack chains, mimicking what security teams face in actual environments. In this round, the lab used a consistent attack technique across all scenarios — a technique widely abused in the wild but difficult to detect. Each attack leveraged MSBuild, a legitimate Windows development tool used to compile applications from project files. While safe in regular use, attackers have learned to embed malicious code inside .proj or .csproj files and execute that code through MSBuild. The result is a fileless attack: Nothing is dropped on disk, and the malicious payload runs directly in memory. Since MSBuild is a trusted binary, traditional security solutions might allow it to run, completely unaware that it's executing malicious logic. This method is part of a growing category of “living-off-the-land” techniques, in which attackers use legitimate system tools for malicious purposes. ## Testing methodology AV-TEST designed 10 separate attack scenarios, five involving ransomware and five focused on information theft (infostealer malware). Every scenario used MSBuild as the delivery mechanism. The threats were launched through realistic infection methods, such as opening email attachments or executing modified script files. Each tested product was scored based on how well it stopped the attack across its full execution chain. For [ransomware](https://www.acronis.com/en/solutions/business/ransomware-protection/) samples, products could score up to three points per test: * One point for basic detection * Two points for partial blocking * Three points for completely preventing encryption For infostealers, the score extended to four points per attack, with an additional point awarded for stopping data exfiltration. The maximum score was 35 points, and Acronis achieved the full score, proving that Acronis Cyber Platform (formerly Acronis Cyber Protect Cloud) successfully prevented both file encryption and data theft in every case. ![Image 3: Acronis defends against every attack in AV-TEST's Real-World ATP evaluation](https://staticfiles.acronis.com/images/content/1edf813135fe32baab91c8522dbf8033.png) ## Why it matters What makes this achievement significant is not just that Acronis detected the threats, but that it fully contained them. In a fileless attack, threats don’t leave obvious traces. Blocking the execution or removing the payload from memory requires advanced behavioral analysis and real-time protection mechanisms. Additionally, this evaluation reflects modern attacker tactics, with which threats are delivered silently using trusted tools to evade antivirus and EDR solutions. Defending against these requires more than signatures: It requires intelligent response at runtime. For managed service providers (MSPs), IT security teams and businesses that need assurance against stealthy, evasive threats, this test provides clear evidence that Acronis Cyber Platform (formerly Acronis Cyber Protect Cloud) delivers full-spectrum protection — even against memory-resident malware and system tool abuse. ## Conclusion AV-TEST’s March–April 2025 ATP evaluation presented one of the most challenging test conditions to date. By using MSBuild as a delivery vector, the lab simulated precisely the kind of stealthy, modern attack that traditional tools often miss. **Acronis was among only four vendors to achieve a flawless 35 / 35 score**, with no data exfiltrated and no files encrypted in any scenario. Acronis Cyber Platform (formerly Acronis Cyber Protect Cloud) received AV-TEST’s Top Product award in the Advanced Threat Protection category. The test was not part of the certification test series in the same time frame, and so a certification badge was not issued. The test results demonstrate Acronis’ ability to stop threats that operate entirely in memory and misuse trusted system components — exactly the kind of attacks today’s enterprises and service providers are most concerned about. Read the full report [here](https://www.av-test.org/en/news/atp-live-test-against-data-theft-and-encryption-malware/). [Cybersecurity](https://www.acronis.com/en/blog/tags/cybersecurity/) [Cyber protection](https://www.acronis.com/en/blog/tags/cyber-protection/) [Malware protection](https://www.acronis.com/en/blog/tags/malware-protection/) ## Written by ![Image 4: Acronis Editorial Team](https://staticfiles.acronis.com/images/content/d85707ae91461544212d39836dc32b42.png) Acronis Editorial Team Acronis is a global cyber protection company that provides natively integrated cybersecurity, data protection, and endpoint management for managed service providers (MSPs), small and medium businesses (SMBs), and enterprise IT departments. [Previous post](https://www.acronis.com/en/blog/posts/crn-honors-two-acronis-managers-as-crn-inclusive-channel-leaders/) [CRN honors two Acronis managers as CRN Inclusive Channel Leaders](https://www.acronis.com/en/blog/posts/crn-honors-two-acronis-managers-as-crn-inclusive-channel-leaders/) [Next post](https://www.acronis.com/en/blog/posts/augmenting-microsoft-defender-av-how-msps-can-respond-to-modern-threats-without-high-costs/) [Augmenting Microsoft Defender AV: How MSPs can respond to modern threats without high costs](https://www.acronis.com/en/blog/posts/augmenting-microsoft-defender-av-how-msps-can-respond-to-modern-threats-without-high-costs/) About Acronis Acronis is a leader in AI-native cyber protection, unifying data protection, cybersecurity, IT operations and hybrid infrastructure to deliver business continuity, security and compliance with less cost and complexity. More than 21,000 service providers trust Acronis to protect over 750,000 businesses in 150 countries. Acronis is headquartered in Schaffhausen, Switzerland. [Add as a preferred source on Google](https://google.com/preferences/source?q=acronis.com) ## Related stories Want to learn more? Read the latest stories featuring this solution on our blog. [Acronis Blog](https://www.acronis.com/en/blog/) ![Image 5: stc Bahrain and Acronis partner to bring advanced endpoint security to businesses in Bahrain](https://staticfiles.acronis.com/images/blog-card/9600f3eea83b8f4e168ea6c1409c8c26.png) [stc Bahrain and Acronis partner to bring advanced endpoint security to businesses in Bahrain](https://www.acronis.com/en/blog/posts/stc-bahrain-and-acronis-partner-to-bring-endpoint-security-to-businesses/) We are proud to announce a strategic partnership with stc Bahrain, expanding access to advanced cybersecurity services for businesses across Bahrain. **October 26, 2026**3 min read ![Image 6: Acronis expands MDR toward broader workspace protection](https://staticfiles.acronis.com/images/blog-card/18e90e89f5ec4ef0901f19008d4ccbf2.png) [Acronis expands MDR toward broader workspace protection](https://www.acronis.com/en/blog/posts/acronis-expands-mdr-toward-broader-workspace-protection/) Acronis is expanding the MDR service with capabilities that make this expertise easier to deliver and help partners address more risks. The developments build on a broader commitment to managed security: helping service providers protect the connected workspace while giving customers access to the expertise needed to investigate threats, respond effectively and maintain business continuity. **October 13, 2026**6 min read ![Image 7: Acronis Cyber Protect v17: Improving cyber resilience across people, data and infrastructure](https://staticfiles.acronis.com/images/blog-card/c2467c28c0278609eb3560cb2a8a4d53.png) [Acronis Cyber Protect v17: Improving cyber resilience across people, data and infrastructure](https://www.acronis.com/en/blog/posts/acronis-cyber-protect-v17-improving-cyber-resilience-across-people-data-and-infrastructure/) Acronis Cyber Protect v17 Q3 2026 expands integrated cyber protection with new capabilities that strengthen security awareness, improve backup operations and extend protection across more virtual environments. The result is stronger cyber resilience, simplified operations and broader protection delivered through a single platform. **October 05, 2026**4 min read