Back to homepage
Search in acronis websites
Try Now

Acronis Blog

TRU Security →
Updates from Acronis Threat Research Unit
Acronis Blog
Cyber protection

All stories in Cyber protection

November 08, 2026 — 3 min read
Acronis researchers uncover AI attack mesh targeting emergency services
November 08, 2026 — 3 min read
Acronis researchers uncover AI attack mesh targeting emergency services
A new Acronis TRU investigation exposes BOSSAI, an attack operation in which one person coordinated 12 AI agents against targets across 11 countries. Learn what the campaign reveals about AI-assisted intrusions, commercial model safeguards and the risks of trusting automated findings.
June 04, 2021 — 5 min read
Threat analysis: DoppelPaymer ransomware
June 04, 2021 — 5 min read
Threat analysis: DoppelPaymer ransomware
DoppelPaymer is a successor of BitPaymer ransomware, and is part of the Dridex malware family. It’s currently being distributed in various forms, including phishing or spam emails with attached documents that are embedded with malicious code — either JavaScript or VBScript. On execution, this code downloads DoppelPaymer’s first-stage loader on the victim’s machine. The attackers then use the PowerShell Empire toolkit to run a brute-force attack on Active Directory. The Mimikatz module is used to dump passwords from the system memory.
June 04, 2021 — 5 min read
Threat analysis: Pysa (Mespinoza) ransomware
June 04, 2021 — 5 min read
Threat analysis: Pysa (Mespinoza) ransomware
Pysa takes an approach commonly referred to as “big game hunting,” meaning that the ransomware group targets high-value assets in organizations that are particularly sensitive to data loss or system downtime. The idea is that victims — which may include healthcare providers, government agencies, and managed service providers — are more likely to quickly pay the ransom, regardless of its cost.
June 04, 2021 — 8 min read
Conti ransomware shuts down backup services and unlocks files with Windows Restart Manager
June 04, 2021 — 8 min read
Conti ransomware shuts down backup services and unlocks files with Windows Restart Manager
Conti ransomware shuts down backup services and unlocks files with Windows Restart Manager before encryption.
June 04, 2021 — 8 min read
Sekhmet ransomware Analysis
June 04, 2021 — 8 min read
Sekhmet ransomware Analysis
Sekhmet ransomware, which first appeared in March 2020, has already disclosed the stolen data from at least six victims to date. One recent known attack that occurred on 20 June 2020 targeted SilPac, a gas handling solutions company based in Santa Clara, California.
June 04, 2021 — 7 min read
Analysis of Ragnar Locker Ransomware
June 04, 2021 — 7 min read
Analysis of Ragnar Locker Ransomware
The threat actor begin the attack by compromising the company’s network via RDP service, using brute force to guess weak passwords or with stolen credentials bought on the Dark Web. Next, the attacker performs second-stage reconnaissance. To elevate privileges, the attacker exploits the CVE-2017-0213 vulnerability in the Windows COM Aggregate Marshaler to run arbitrary code with elevated privileges.
June 01, 2021 — 4 min read
What is an email cyberattack?
June 01, 2021 — 4 min read
What is an email cyberattack?
It is another workday, and one of your client’s users is perusing through their inbox and sees an email from the U.S. Internal Revenue Service (IRS). Her first thought is, “Why would the IRS be contacting me?” Without thinking further, she quickly opens the email, clicks on the link and BAM! Next thing she sees on her screen is a message telling her that her files have been encrypted and she must pay a ransom to get the key to decrypt them.
May 26, 2021 — 4 min read
Cyber protection of champions: four European football teams win with Acronis
May 26, 2021 — 4 min read
Cyber protection of champions: four European football teams win with Acronis
As a proud cyber protection partner of Manchester City F.C., FC Internazionale Milano, AFC Ajax Amsterdam, and Club Atlético de Madrid, Acronis is proud to have supported four world-renowned teams as they earned historic championships in the 2020/21 season! Acronis #CyberFit sports partners take advantage of the innovative features of Acronis Cyber Protection Solutions to achieve proactive, active, and reactive protection for all of their data, applications, and systems – keeping these champions secure and focused on optimizing their performance on the field.
May 26, 2021 — 2 min read
Acronis wins Most Innovative Solution award at ASCII Success Summit
May 26, 2021 — 2 min read
Acronis wins Most Innovative Solution award at ASCII Success Summit
We’re thrilled to announce that Acronis has been awarded Most Innovative Solution at the first live ASCII Summit of 2021. This award acknowledges the significant evolution that Acronis has made from backup vendor to cyber protection partner of the global MSP channel community.
May 20, 2021 — 3 min read
What goes into a strong, modern cyber protection stack
May 20, 2021 — 3 min read
What goes into a strong, modern cyber protection stack
For service providers, cybersecurity services are in demand. Building tailored cybersecurity bundles that ensure client protection while earning you the most profit, however, is more complicated than it seems. Build your security services bundle (or bundles) with this handy guide to the services and components that help you find the best results for your organization and your clients.
May 20, 2021 — 6 min read
3 Ways to avoid malware infection in software patches
May 20, 2021 — 6 min read
3 Ways to avoid malware infection in software patches
The objective of a software patch is to eliminate a vulnerability or fix a software flaw that is identified after the software is released, add new functionality or improve performance. Timely installation of newly released patches is an important maintenance step. It keeps your systems current and stable, optimizes performance, and mitigates the threat of new malware infection.
May 04, 2021 — 4 min read
Recognizing the power of cyber protection: Acronis gets $250M+ investment, valuation at $2.5B+
May 04, 2021 — 4 min read
Recognizing the power of cyber protection: Acronis gets $250M+ investment, valuation at $2.5B+
A new day is dawning for Acronis and the IT industry. Today we announced that Acronis has secured more than $250 million in a funding round led by CVC Capital Partners VII and other investors, bringing our valuation to more than $2.5 billion. More than doubling our valuation in 18 months – especially during a global pandemic – is a testament to the power of Acronis’ cyber protection technology and the dedication of our network of more than 50,000 partners.  This funding round comes at a pivotal time, as Acronis has been intensifying our support for service provider partners to deliver cyber protection to businesses of any size.  These funds will immediately be used to further accelerate our current growth strategy.
April 22, 2021 — 4 min read
Continuous data protection: What you need to know
April 22, 2021 — 4 min read
Continuous data protection: What you need to know
Today’s business users are more reliant on data than ever before, so any downtime or data loss can devastate an organization. Since data loss can happen at any moment, as a service provider you need to restore your clients’ business-critical data as quickly as possible.  How quickly they get back to normal depends on when you last backed up their data. Poor data protection can set them back hours, days, or perhaps weeks – severely impact their employees’ productivity and the organization’s long-term viability.