---
title: Targeted phishing takes aim at Acronis – and loses
description: Actual phishing attempt against an executive highlights the rise in phishing attacks and the importance of cybersecurity measures like URL filtering
canonical_url: https://www.acronis.com/en/blog/posts/targeted-phishing-takes-aim-acronis-and-loses/
locale: en
last_updated: 2026-10-27
---

[Acronis Blog](https://www.acronis.com/en/blog/)
# Targeted phishing takes aim at Acronis – and loses

Phishing attacks, which involve criminals posing as legitimate contacts use emails and instant messaging to trick victims into providing valuable information like login credentials and banking or credit card details, is a major challenge for organizations ... and it’s on the rise. The Anti-Phishing Working Group’s (APWG) Phishing Activity Trends Report for Q1 2020 notes that phishing attacks rose to the highest level since 2016, with more than 60,000 phishing sites being reported in March alone. As a member of APWG, Acronis can confirm that we’ve seen an uptick as well and Acronis employees of all levels receive well-crafted phishing emails every day. Let’s look at one recent example that targeted one of our c-level executives.

[Learn More](https://www.acronis.com/en/products/cyber-protect/)

[![Image 2: MSP Threats Security Team](https://staticfiles.acronis.com/images/content/1578b8dff96325855c4525d865e7fc63.png)](https://www.acronis.com/en/blog/authors/acronis-security-team/ "MSP Threats Security Team")

[MSP Threats Security Team](https://www.acronis.com/en/blog/authors/acronis-security-team/)

4 min read

Last updated 14 August 2020

Phishing attacks, which involve criminals posing as legitimate contacts use emails and instant messaging to trick victims into providing valuable information like login credentials and banking or credit card details, is a major challenge for organizations ... and it’s on the rise.

Last year, Verizon’s Data Breach Investigations Report concluded that phishing was the number one attack vector used in successful data breaches. Their report also revealed that 94% of malware was delivered via email, with phishing emails being the most prevalent type used. Meanwhile, other research from 2019 showed that spear-phishing emails, which target specific individuals or organizations (rather than “casting a wide net”) are used by nearly 65% of all known groups carrying out targeted cyberattacks.

Unfortunately, phishing attempts are on the rise. The Anti-Phishing Working Group’s (APWG) Phishing Activity Trends Report for Q1 2020 notes that phishing attacks rose to the highest level since 2016, with more than 60,000 phishing sites being reported in March alone.

As a member of APWG, Acronis can confirm that we’ve seen an uptick as well and Acronis employees of all levels receive well-crafted phishing emails every day. Let’s look at one of the latest examples.

### Real phishing email received by an Acronis c-level executive

Recently one of Acronis’ top managers found the phishing email pictured below in his inbox. For a security professional or someone in the cybersecurity industry, the attempt is relatively easy to recognize. Yet this example shows how employees who are not as well-trained regarding security might easily fall victim to this kind of attack, leading to compromise and data loss, unless a strong cybersecurity product is running on their machines.

![Image 3: Example of spear phishing email](https://staticfiles.acronis.com/images/content/dcf07c3e4dcc3962b4834680ac5f41b1.png)

Example of spear phishing email

As we can see, email seems to be originated from Acronis support. If you do not check the actual email address of the sender and your email client does not show it by default, you might fall into this trap.

Since the employee who received this email works with invoices on a daily basis, it appears that the cybercriminals who sent the email likely conducted some social reconnaissance before sending it. Even if they didn’t do that research, however, a lot of employees can be responsible for invoices, so reason and theme of email can be an effective ploy. The bad guys will play on common experiences and fears because they might get a hit if the organization’s spam filter or email AV makes a mistake and lets the message through. Last but not least, we see several malicious links included in the email. If you do not check them and blindly click, they will bring you to malicious websites.

As stated above, this example is relatively easy to spot – but what if the criminals behind this attack used more sophisticated techniques like zombie phishing? Zombie phishing is the nasty trick of hijacking the business account of someone in your company or at one of your partners, finding some relevant email thread, and then continuing the conversation with an email that delivers malware or malicious links. Since it comes from an actual colleague’s address – from a personal contact like your boss – it’s hard to do something about it unless you have proper security in place.

Another trick that is typically used in more sophisticated attacks is the usage of shortened URLs, like the ones made with Bitly. You can’t check the actual address by hovering your cursor over the link and these URLs may not yet be added to anti-phishing databases.

### Safety through web filtering

Given these challenges, your machine needs to be protected by URL filtering, which is also called web filtering or web antivirus. It is not sufficient protection on its own but, as a part of a multilayered defense, it does a good job of stopping these kinds of attacks.

Acronis Web Security delivers URL analysis and filtering functionality from our cloud reputation base (Acronis Cloud Brain). Local detection rules for malicious and phishing URLs are also kept in our Acronis Cyber Protection Solutions, ensuring protection even when there are internet connection disruptions.

Acronis URL filtering is enhanced with payload analysis and a machine learning model, which analyzes the link itself and the page’s structure. As a result, it can:

*   Stop silent drive-by downloads and intercept HTTP/HTTPS requests
*   Protect against any phishing sites and block sites that distribute malware
*   Identify scams and infections using themes that leverage actual threats, such as COVID-19
*   Integrate intelligence from industry partners into Acronis’ signature- and AI-based detection

The machines of all Acronis employees are protected by the URL filtering integrated into [Acronis Cyber Protect](https://www.acronis.com/en-us/business/cyber-protect/), which is why the phishing attempt against our executive was immediately detected and blocked.

![Image 4: Detecting malicious websites](https://staticfiles.acronis.com/images/content/78582fdf66c613d661780b49f7f85816.png)

Detecting malicious websites

### Final thought

Clearly the threat of phishing in all of its forms is not going away anytime soon, and the rising number of attacks should concern organizations of any size. Thankfully, there are strategies and solutions that will minimize or effectively eliminate the risk you face.

Read more about Acronis’ multilayered protection in the following [whitepaper](https://dl.acronis.com/u/rc/WP_Acronis_Cyber_Protect_Cloud_Multilayered_Cybersecurity_EN-US_200807.pdf), or consider trying [Acronis Cyber Protect](https://www.acronis.com/en-us/business/cyber-protect/) for yourself to ensure the URL filtering that stopped the attack against our executive protects your executive – and all of your employees.

[Ransomware protection](https://www.acronis.com/en/blog/tags/ransomware-protection/)  
[Malware protection](https://www.acronis.com/en/blog/tags/malware-protection/)  
[Cyberthreats](https://www.acronis.com/en/blog/tags/cyberthreats/)

## Written by

![Image 5: MSP Threats Security Team](https://staticfiles.acronis.com/images/content/1578b8dff96325855c4525d865e7fc63.png)

MSP Threats Security Team

[Previous post](https://www.acronis.com/en/blog/posts/channel-strong-tour-rolls-temecula/)  
[Channel Strong Tour rolls into Temecula](https://www.acronis.com/en/blog/posts/channel-strong-tour-rolls-temecula/)

[Next post](https://www.acronis.com/en/blog/posts/channel-strong-houston-tools-were-ready-we-just-needed-activate-them/)  
[Channel Strong in Houston: The tools were ready, we just needed to activate them](https://www.acronis.com/en/blog/posts/channel-strong-houston-tools-were-ready-we-just-needed-activate-them/)

About Acronis

Acronis is a leader in AI-native cyber protection, unifying data protection, cybersecurity, IT operations and hybrid infrastructure to deliver business continuity, security and compliance with less cost and complexity. More than 21,000 service providers trust Acronis to protect over 750,000 businesses in 150 countries. Acronis is headquartered in Schaffhausen, Switzerland.

[Add as a preferred source on Google](https://google.com/preferences/source?q=acronis.com)

## Related stories

Want to learn more? Read the latest stories featuring this solution on our blog.

[Acronis Blog](https://www.acronis.com/en/blog/)

![Image 6: stc Bahrain and Acronis partner to bring advanced endpoint security to businesses in Bahrain](https://staticfiles.acronis.com/images/blog-card/9600f3eea83b8f4e168ea6c1409c8c26.png)

[stc Bahrain and Acronis partner to bring advanced endpoint security to businesses in Bahrain](https://www.acronis.com/en/blog/posts/stc-bahrain-and-acronis-partner-to-bring-endpoint-security-to-businesses/)

We are proud to announce a strategic partnership with stc Bahrain, expanding access to advanced cybersecurity services for businesses across Bahrain.

**October 26, 2026**3 min read

![Image 7: Acronis expands MDR toward broader workspace protection](https://staticfiles.acronis.com/images/blog-card/18e90e89f5ec4ef0901f19008d4ccbf2.png)

[Acronis expands MDR toward broader workspace protection](https://www.acronis.com/en/blog/posts/acronis-expands-mdr-toward-broader-workspace-protection/)

Acronis is expanding the MDR service with capabilities that make this expertise easier to deliver and help partners address more risks. The developments build on a broader commitment to managed security: helping service providers protect the connected workspace while giving customers access to the expertise needed to investigate threats, respond effectively and maintain business continuity.

**October 13, 2026**6 min read

![Image 8: Acronis Cyber Protect v17: Improving cyber resilience across people, data and infrastructure](https://staticfiles.acronis.com/images/blog-card/c2467c28c0278609eb3560cb2a8a4d53.png)

[Acronis Cyber Protect v17: Improving cyber resilience across people, data and infrastructure](https://www.acronis.com/en/blog/posts/acronis-cyber-protect-v17-improving-cyber-resilience-across-people-data-and-infrastructure/)

Acronis Cyber Protect v17 Q3 2026 expands integrated cyber protection with new capabilities that strengthen security awareness, improve backup operations and extend protection across more virtual environments. The result is stronger cyber resilience, simplified operations and broader protection delivered through a single platform.

**October 05, 2026**4 min read