--- title: "Weekly Tech Roundup: January 23" description: "Data protection news of the week: data breach rase 46% in 2016, new unstoppable waves of gmail phishing campaign, malware to hit healthcare - and more" canonical_url: https://www.acronis.com/en/blog/posts/weekly-tech-roundup-january-23/ locale: en last_updated: 2026-10-27 --- [Acronis Blog](https://www.acronis.com/en/blog/) # Weekly Tech Roundup: January 23 With much of the news revolving around the inauguration of President Donald Trump, it might have been easy to miss the revelations in the world of cybersecurity. A number of new, and old, malware variants were exposed, and the tech world began doing more to protect themselves against attack. With these revelations came new products ready to fight against ransomware, putting data protection at the forefront of cybersecurity. The headlines were endless, but we made it our mission to gather the most relevant and most intriguing, topics of discussion. What did you miss? [Try Now](https://www.acronis.com/en/products/cloud/trial/) [![Image 2: Kristina Udice](https://staticfiles.acronis.com/images/content/4ebd2c6ab90855a20d45286557169382.png)](https://www.acronis.com/en/blog/authors/kristina-udice/ "Kristina Udice") [Kristina Udice](https://www.acronis.com/en/blog/authors/kristina-udice/) 5 min read Last updated 20 November 2022 With much of the news revolving around the inauguration of President Donald Trump, it might have been easy to miss the revelations in the world of cybersecurity. A number of new, and old, malware variants were exposed, and the tech world began doing more to protect themselves against attack. With these revelations came new products ready to fight against ransomware, putting data protection at the forefront of cybersecurity. The headlines were endless, but we made it our mission to gather the most relevant and most intriguing, topics of discussion. What did you miss? ## New ransomware offers payment plans to victims [Ransomware](http://www.acronis.com/en-us/resource-center/resource/ransomware/) is getting more and more innovative; it’s almost hard to keep up. A ransomware variant named Spora is making the rounds, bringing with it a variety of new features like the ability to work offline and a sophisticated payment website, according to Bleeping Computer. These innovations are making many think twice about their data protection capabilities. Spora is being distributed through spam emails that mask themselves as invoices. The attachments hold the malicious ransomware. Once these files are opened, the encryption process begins. It’s all about disaster recovery from here. This specific variant doesn’t encrypt all files, just the ones with certain extensions that indicate likely usefulness or business value, like .xls, .doc, .pdf and .backup. Once these files are encrypted, there is no way to get them back other than to follow through with the strange payment plan. Victims are forced to log in and sync their computer to an online portal. They are then offered a number of options to decrypt their data: * Decrypt your files (currently $79) * Buy immunity from future Spora infections (currently $50) * Remove all Spora-related files after paying the ransom (currently $20) * Restore a file (currently $30) * Restore two files for free For now, Spora is only attacking Russian users. But that doesn’t mean it doesn’t have its sights set on expanding. In the meantime, users should ensure that their data is protected by conducting routine [computer backups](http://www.acronis.com/en-us/personal/computer-backup/). RELATED: [DeriaLock Demands Victims to Pay Ransom by Skype](http://www.acronis.com/en-us/blog/posts/derialock-demands-victims-pay-ransom-skype) ## Data breaches rise 40% in 2016 A new report from the Identity Theft Resource Center and CyberScout points to increased data breaches in 2016, a trend that makes [data protection](http://www.acronis.com/en-us/business/backup/) and [disaster recovery](http://www.acronis.com/en-us/business/disaster-recovery/) planning essential in 2017. In 2016, U.S. data breaches reached an all-time high of 1,093 breaches: a 40 percent increase from 2015. “With support from CyberScout, the ITRC has been able to heighten its efforts in tracking breaches nationwide by seeking out information on breach incidents through direct contact with numerous states’ attorney general offices as well as by submitting Freedom of Information Act requests. For the past 10 years, the ITRC has been aware of the under-reporting of data breach incidents on the national level and the need for more state or federal agencies to make breach notifications more publicly available. This year we have seen a number of states take this step by making data breach notifications public on their websites. The ITRC Data Breach Report 2016 now includes information from more than a dozen state agencies,” said Eva Velasquez, President and CEO, ITRC. The report went on to break down the five industry sectors hit by data breaches. In the lead was the business sector, with 494 reported incidents, followed by the healthcare and medical industry with 377 incidents, the education sector with 99 incidents, the government with 72, and the financial sector with 52. The leading causes for these breaches, accounting for 55.5 percent of attacks, were hacking, skimming or phishing attacks. ## Mac malware found hacking medical research Previously undetected Mac malware has been making the rounds for years, but was only recently uncovered, according to Malwarebytes. It was detected by an IT administrator at Malwarebytes. The malware, called Fruitfly, is designed to take screen shots, hack into a Mac’s webcam, and give hackers remote access to the mouse. It was also found to work with Linux. Further investigation led these researchers to the conclusion that this malware has been circulating since at least October 2014. They found certain updates that indicate a change was made when Yosemite (Apple OSX release 10.10) was released. But it’s not just how long this malware went undetected that is troubling, it’s the material and data it was stealing that is causing some concern. It’s believed that Fruitfly was being used for espionage, the malware targeting biomedical research institutions. Since its detection, Apple has released an update to protect against further Fruitfly infections. RELATED: [What is Ransomware?](http://www.acronis.com/en-us/blog/posts/what-ransomware) ## Innovative Gmail phishing campaign bypasses 2FA Phishing campaigns have always been popular, but new techniques are making a new Gmail phishing campaign nearly unstoppable: it bypasses two-factor authentication in real-time scenarios, according to Tech Target. It is gaining access to users’ data by tricking Google Chrome into formatting its URL to mimic the Gmail login. The page itself looks authentic, and users see the string “account.google.com” in the URL line. The link is not coded with a green or red HTTP link, however, so the phishing campaign is not completely foolproof. "They see ordinary black text. That is why this attack is so effective. In user interface design and in human perception, elements that are connected by uniform visual properties are perceived as being more related than elements that are not connected. In this case the 'data:text/html' and the trusted hostname are the same color. That suggests to our perception that they're related and the ‘data:text/html' part either doesn't matter or can be trusted,” said Mark Maunder, founder and CEO of Wordfence. Google is aware of these hacking attempts, and has since begun increasing security and strengthening its defenses. Google is urging people to activate two-step authentication for additional protection, but there have been reports that even this hasn’t stopped the hacks. Some attacks appear to include two-factor authentication coding for real-time credential hacking. But experts say this isn’t exactly new, though it is quite rare. "It does require a significant investment on the attacker's side to be able to take advantage of the incredibly small window of opportunity to get into an account before the [time-based one-time password] code expires. Thankfully this isn't all that common—although if attackers do manage to gain significant profit, they will adjust and adapt,” said Absolute Software global security strategist Richard Henderson. [Cybersecurity](https://www.acronis.com/en/blog/tags/cybersecurity/) [Cyber protection](https://www.acronis.com/en/blog/tags/cyber-protection/) ## Written by ![Image 3: Kristina Udice](https://staticfiles.acronis.com/images/content/4ebd2c6ab90855a20d45286557169382.png) Kristina Udice [Previous post](https://www.acronis.com/en/blog/posts/leveraging-hyper-v-2016-resilient-change-tracking-backup/) [Leveraging Hyper-V 2016 Resilient Change Tracking for Backup](https://www.acronis.com/en/blog/posts/leveraging-hyper-v-2016-resilient-change-tracking-backup/) [Next post](https://www.acronis.com/en/blog/posts/5-reasons-back-your-employees-pcs/) [5 Reasons to Back Up Your Employees’ PCs](https://www.acronis.com/en/blog/posts/5-reasons-back-your-employees-pcs/) About Acronis Acronis is a leader in AI-native cyber protection, unifying data protection, cybersecurity, IT operations and hybrid infrastructure to deliver business continuity, security and compliance with less cost and complexity. More than 21,000 service providers trust Acronis to protect over 750,000 businesses in 150 countries. Acronis is headquartered in Schaffhausen, Switzerland. [Add as a preferred source on Google](https://google.com/preferences/source?q=acronis.com) ## Related stories Want to learn more? Read the latest stories featuring this solution on our blog. [Acronis Blog](https://www.acronis.com/en/blog/) ![Image 4: stc Bahrain and Acronis partner to bring advanced endpoint security to businesses in Bahrain](https://staticfiles.acronis.com/images/blog-card/9600f3eea83b8f4e168ea6c1409c8c26.png) [stc Bahrain and Acronis partner to bring advanced endpoint security to businesses in Bahrain](https://www.acronis.com/en/blog/posts/stc-bahrain-and-acronis-partner-to-bring-endpoint-security-to-businesses/) We are proud to announce a strategic partnership with stc Bahrain, expanding access to advanced cybersecurity services for businesses across Bahrain. **October 26, 2026**3 min read ![Image 5: Introducing New Acronis CEO: Prakash Panjwani](https://staticfiles.acronis.com/images/blog-card/30cb571f6f1aaa131733e5727a4a250c.png) [Introducing New Acronis CEO: Prakash Panjwani](https://www.acronis.com/en/blog/posts/introducing-new-acronis-ceo-prakash-panjwani/) We are pleased to announce the appointment of our new Chief Executive Officer, Prakash Panjwani. A veteran cybersecurity CEO, Panjwani previously served as CEO of WatchGuard Technologies and SafeNet. **October 15, 2026**2 min read ![Image 6: Acronis expands MDR toward broader workspace protection](https://staticfiles.acronis.com/images/blog-card/18e90e89f5ec4ef0901f19008d4ccbf2.png) [Acronis expands MDR toward broader workspace protection](https://www.acronis.com/en/blog/posts/acronis-expands-mdr-toward-broader-workspace-protection/) Acronis is expanding the MDR service with capabilities that make this expertise easier to deliver and help partners address more risks. The developments build on a broader commitment to managed security: helping service providers protect the connected workspace while giving customers access to the expertise needed to investigate threats, respond effectively and maintain business continuity. **October 13, 2026**6 min read