--- title: Acronis Blog description: Stay up to date with the latest cybersecurity and cyber protection news, research, vulnerabilities, threats and computer attacks. canonical_url: https://www.acronis.com/en/blog/tags/malware-protection/page/7/ locale: en last_updated: 2026-10-27 --- # Acronis Blog [TRU Security → Updates from Acronis Threat Research Unit](https://www.acronis.com/en/tru/) [Acronis Blog](https://www.acronis.com/en/blog/) Malware protection # All stories in Malware protection [![Image 1: Acronis expands MDR toward broader workspace protection](https://staticfiles.acronis.com/images/blog-cover/18e90e89f5ec4ef0901f19008d4ccbf2.png) 13 October 2026 — 6 min read Acronis expands MDR toward broader workspace protection Acronis is expanding the MDR service with capabilities that make this expertise easier to deliver and help partners address more risks. The developments build on a broader commitment to managed security: helping service providers protect the connected workspace while giving customers access to the expertise needed to investigate threats, respond effectively and maintain business continuity.](https://www.acronis.com/en/blog/posts/acronis-expands-mdr-toward-broader-workspace-protection/) [05 July 2021 — 7 min read ![Image 2: Combating new cyberthreats requires a new playbook](https://staticfiles.acronis.com/images/blog-cover/701297a7531d17743bf6f7c5f50e97c8.png) REvil ransomware supply chain attack against MSPs Just as people were starting to forget about the huge Solar Winds software supply-chain attack, another high-profile attack happens. This time, the REvil/Sodinokibi ransomware group pushed out a malicious update for Kaseya's VSA IT management software, leading to dozens of MSPs around the globe – and subsequently their customers – being compromised by ransomware. The global network of Acronis Cyber Protection Operation Centers (CPOCs) is monitoring the situation, as additional details of the attack are still unraveling. Here’s what we know at this point.](https://www.acronis.com/en/blog/posts/revil-ransomware-supply-chain-attack-against-msps/) [04 July 2021 — 2 min read ![Image 3: Threat analysis: DoppelPaymer ransomware](https://staticfiles.acronis.com/images/blog-cover/18a373b02d45b7c3ed01a5efacfff718.png) Cyberattack group REvil attacks MSPs and their clients in a supply-side attack Managed service providers (MSPs) are on alert this holiday weekend as those that run Kaseya VSA software are being informed by the company to shut down their on-premises VSA servers following a suspected supply-chain attack on their remote management software. Kaseya proactively shut down their SaaS servers that run VSA for their partners.](https://www.acronis.com/en/blog/posts/cyberattack-group-revil-attacks-msps-and-their-clients-supply-side-attack/) [04 June 2021 — 5 min read ![Image 4: Threat analysis: DoppelPaymer ransomware](https://staticfiles.acronis.com/images/blog-cover/18a373b02d45b7c3ed01a5efacfff718.png) Threat analysis: DoppelPaymer ransomware DoppelPaymer is a successor of BitPaymer ransomware, and is part of the Dridex malware family. It’s currently being distributed in various forms, including phishing or spam emails with attached documents that are embedded with malicious code — either JavaScript or VBScript. On execution, this code downloads DoppelPaymer’s first-stage loader on the victim’s machine. The attackers then use the PowerShell Empire toolkit to run a brute-force attack on Active Directory. The Mimikatz module is used to dump passwords from the system memory.](https://www.acronis.com/en/blog/posts/doppelpaymer-ransomware/) [04 June 2021 — 5 min read ![Image 5: Canalys adds Acronis to Endpoint Security Performance Index](https://staticfiles.acronis.com/images/blog-cover/e44479aa9902652a121944102811a7bd.png) Threat analysis: Pysa (Mespinoza) ransomware Pysa takes an approach commonly referred to as “big game hunting,” meaning that the ransomware group targets high-value assets in organizations that are particularly sensitive to data loss or system downtime. The idea is that victims — which may include healthcare providers, government agencies, and managed service providers — are more likely to quickly pay the ransom, regardless of its cost.](https://www.acronis.com/en/blog/posts/pysa-ransomware/) [04 June 2021 — 8 min read ![Image 6: Conti ransomware shuts down backup services and unlocks files with Windows Restart Manager](https://staticfiles.acronis.com/images/blog-cover/30ed349a67c19cf8c26685d868f90f47.png) Conti ransomware shuts down backup services and unlocks files with Windows Restart Manager Conti ransomware shuts down backup services and unlocks files with Windows Restart Manager before encryption.](https://www.acronis.com/en/blog/posts/conti-ransomware/) [04 June 2021 — 8 min read ![Image 7: Sekhmet ransomware Analysis](https://staticfiles.acronis.com/images/blog-cover/8d171c9d5dce1ca04801e22dc732de75.png) Sekhmet ransomware Analysis Sekhmet ransomware, which first appeared in March 2020, has already disclosed the stolen data from at least six victims to date. One recent known attack that occurred on 20 June 2020 targeted SilPac, a gas handling solutions company based in Santa Clara, California.](https://www.acronis.com/en/blog/posts/sekhmet-ransomware/) [04 June 2021 — 7 min read ![Image 8: Combating new cyberthreats requires a new playbook](https://staticfiles.acronis.com/images/blog-cover/701297a7531d17743bf6f7c5f50e97c8.png) Analysis of Ragnar Locker Ransomware The threat actor begin the attack by compromising the company’s network via RDP service, using brute force to guess weak passwords or with stolen credentials bought on the Dark Web. Next, the attacker performs second-stage reconnaissance. To elevate privileges, the attacker exploits the CVE-2017-0213 vulnerability in the Windows COM Aggregate Marshaler to run arbitrary code with elevated privileges.](https://www.acronis.com/en/blog/posts/ragnar-locker/) [03 June 2021 — 2 min read ![Image 9: Combating new cyberthreats requires a new playbook](https://staticfiles.acronis.com/images/blog-cover/701297a7531d17743bf6f7c5f50e97c8.png) TAG Cyber names Acronis Distinguished Vendor in Q2 2021 Security Annual Acronis has been named a TAG Cyber Distinguished Vendor in 2021, and part of the benefits of this designation include being featured in the firm’s flagship “Security Annual” quarterly reports. To this end, TAG Cyber’s Q2’21 report was recently published. The report is, for a lack of a better word, a “beast.” It is over 100 pages long and includes 10 op-eds, 13 interviews with industry executives, and five technical whitepapers. While we certainly recommend the entire thing, we also know your time may be limited. That’s why we made a summary of the report that streamlined the content that was most relevant to the Acronis community. Let's take a quick look at what's included.](https://www.acronis.com/en/blog/posts/tag-cyber-names-acronis-distinguished-vendor-q2-2021-security-annual/) [20 May 2021 — 6 min read ![Image 10: 3 Ways to avoid malware infection in software patches](https://staticfiles.acronis.com/images/blog-cover/74dd033305077b8ad219667201379601.png) 3 Ways to avoid malware infection in software patches The objective of a software patch is to eliminate a vulnerability or fix a software flaw that is identified after the software is released, add new functionality or improve performance. Timely installation of newly released patches is an important maintenance step. It keeps your systems current and stable, optimizes performance, and mitigates the threat of new malware infection.](https://www.acronis.com/en/blog/posts/avoid-malware-infection/) [06 May 2021 — 1 min read ![Image 11: Top 5 Vulnerabilities of SMBs](https://staticfiles.acronis.com/images/blog-cover/bd62a55daae50fdec0d6a6b238034607.png) Top 5 Vulnerabilities of SMBs Cyberattacks can cause several different types of losses to your business. Loss of access to vital customer information or critical financial data can be detrimental. Brand reputation can be impacted if customers lose faith. Knowing where your business is vulnerable to a cybercriminal’s endeavors is the first step to cyber protection and mitigating risk.](https://www.acronis.com/en/blog/posts/top-5-vulnerabilities-smbs/) [13 April 2021 — 2 min read ![Image 12: Canalys adds Acronis to Endpoint Security Performance Index](https://staticfiles.acronis.com/images/blog-cover/e44479aa9902652a121944102811a7bd.png) Canalys adds Acronis to Endpoint Security Performance Index With the launch of Acronis Cyber Protect in 2020, we began to compete in other sectors above and beyond backup and recovery. With integrated anti-malware, vulnerability assessments, and URL filtering, Acronis started looking more like an endpoint protection solution – and it seems the analyst community took notice. Most notably, the market research firm Canalys recently began including Acronis in their Endpoint Security Vendor Performance Index, and our unified solutions performed very well.](https://www.acronis.com/en/blog/posts/canalys-adds-acronis-endpoint-security-performance-index/) [24 February 2021 — 2 min read ![Image 13: Combating new cyberthreats requires a new playbook](https://staticfiles.acronis.com/images/blog-cover/701297a7531d17743bf6f7c5f50e97c8.png) Combating new cyberthreats requires a new playbook No matter how skilled and capable your IT manager or team is at running checks on network and data, they are only as good as the technology stack you rely on. Between juggling server issues, software updates, printers not working, and constantly reminding your employees to reset passwords, they don’t have time to focus entirely on protecting your data, systems, and applications. The technology to keep your businesses running and users productive needs to be reliable and secure.](https://www.acronis.com/en/blog/posts/combating-new-cyberthreats-requires-new-playbook/) [1](https://www.acronis.com/en/blog/tags/malware-protection/page/1/) [2](https://www.acronis.com/en/blog/tags/malware-protection/page/2/) [3](https://www.acronis.com/en/blog/tags/malware-protection/page/3/) [4](https://www.acronis.com/en/blog/tags/malware-protection/page/4/) [5](https://www.acronis.com/en/blog/tags/malware-protection/page/5/) [6](https://www.acronis.com/en/blog/tags/malware-protection/page/6/) [7](https://www.acronis.com/en/blog/tags/malware-protection/page/7/) [8](https://www.acronis.com/en/blog/tags/malware-protection/page/8/) [9](https://www.acronis.com/en/blog/tags/malware-protection/page/9/)