Back to homepage
Search in acronis websites
Try Now

Acronis Blog

TRU Security →
Updates from Acronis Threat Research Unit
Acronis Blog
Malware protection

All stories in Malware protection

October 13, 2026 — 6 min read
Acronis expands MDR toward broader workspace protection
October 13, 2026 — 6 min read
Acronis expands MDR toward broader workspace protection
Acronis is expanding the MDR service with capabilities that make this expertise easier to deliver and help partners address more risks. The developments build on a broader commitment to managed security: helping service providers protect the connected workspace while giving customers access to the expertise needed to investigate threats, respond effectively and maintain business continuity.
December 31, 2021 — 4 min read
Acronis earns security accolades in independent evaluations
December 31, 2021 — 4 min read
Acronis earns security accolades in independent evaluations
We’re proud to look back at a year of growth, community-building and analyst recognition from independent analysts – all of which speaks to the importance of the cyber protection approach in the face of modern IT challenges and cyberthreats. That’s why, we’re thrilled to highlight five recent independent evaluations of the cybersecurity capabilities of Acronis Cyber Protect and Acronis Cyber Platform.
December 16, 2021 — 3 min read
What you need to know about the Log4j vulnerability
December 16, 2021 — 3 min read
What you need to know about the Log4j vulnerability
Since being identified on December 9, the Log4j vulnerability has become a major concern for IT professionals who were forced to suddenly shift from their end-of-year wind down to high alert for potential exploits. To assuage some of these concerns – and ensure that the Acronis community has the knowledge they need to respond to this vulnerability effectively, Acronis led an informational webinar. Here are the key points.
December 07, 2021 — 4 min read
Acronis Cyberthreats Report 2022 unveils cyberthreat predictions
December 07, 2021 — 4 min read
Acronis Cyberthreats Report 2022 unveils cyberthreat predictions
At this year’s Acronis #CyberFit summit in Dubai, held December 8 and 9, Acronis will release its 2022 cyberthreats report. The report focuses on the increasing number and severity of cyberattacks during 2021, and provides the outlook for 2022.
October 19, 2021 — 4 min read
Acronis Cyber Readiness Report 2021 reveals critical security gaps left by IT leaders
October 19, 2021 — 4 min read
Acronis Cyber Readiness Report 2021 reveals critical security gaps left by IT leaders
The Acronis Cyber Readiness Report 2021 analyzes how businesses and the IT industry have adapted to the post-COVID landscape. Many are still struggling in a world that shows no sign of a full return to office-only environments – and while demand for cyber protection solutions continues to grow, misplaced trust, misaligned priorities, and an ever-evolving cyberthreat landscape are threatening businesses.
October 04, 2021 — 3 min read
How to stay proactively protected this Cybersecurity Awareness Month
October 04, 2021 — 3 min read
How to stay proactively protected this Cybersecurity Awareness Month
This month marks both the eighteenth year of National Cybersecurity Awareness Month — an initiative led by the U.S. Department of Homeland Security — and the tenth year of European Cybersecurity month, the European Union’s annual campaign around promoting digital security and staying safe online. Today, we take a look at the current cyberthreat landscape and proactive steps you can take towards data safety.
August 26, 2021 — 3 min read
DCIG: Acronis offers MSPs clear advantages over StorageCraft
August 26, 2021 — 3 min read
DCIG: Acronis offers MSPs clear advantages over StorageCraft
Choosing the right solution to build your services around can feel like a tricky prospect. Analyst firm Data Center Intelligence Group (DCIG) recently compared Acronis Cyber Platform and StorageCraft Cloud Services — and we encourage service providers to consider their findings.
July 28, 2021 — 6 min read
#BHUSA or bust: Hopes and expectations for Black Hat 2021
July 28, 2021 — 6 min read
#BHUSA or bust: Hopes and expectations for Black Hat 2021
Since 1997, Black Hat has been a staple in the world of cybersecurity conferences. Having been in cybersecurity for nearly a decade, I’ve been aware of Black Hat, but haven’t had the opportunity to attend. Sure, I’ve attended DEF CON and some local cybersecurity conferences, but never one with a corporate focus.
July 05, 2021 — 7 min read
REvil ransomware supply chain attack against MSPs
July 05, 2021 — 7 min read
REvil ransomware supply chain attack against MSPs
Just as people were starting to forget about the huge Solar Winds software supply-chain attack, another high-profile attack happens. This time, the REvil/Sodinokibi ransomware group pushed out a malicious update for Kaseya's VSA IT management software, leading to dozens of MSPs around the globe – and subsequently their customers – being compromised by ransomware. The global network of Acronis Cyber Protection Operation Centers (CPOCs) is monitoring the situation, as additional details of the attack are still unraveling. Here’s what we know at this point.
July 04, 2021 — 2 min read
Cyberattack group REvil attacks MSPs and their clients in a supply-side attack
July 04, 2021 — 2 min read
Cyberattack group REvil attacks MSPs and their clients in a supply-side attack
Managed service providers (MSPs) are on alert this holiday weekend as those that run Kaseya VSA software are being informed by the company to shut down their on-premises VSA servers following a suspected supply-chain attack on their remote management software. Kaseya proactively shut down their SaaS servers that run VSA for their partners.
June 04, 2021 — 5 min read
Threat analysis: DoppelPaymer ransomware
June 04, 2021 — 5 min read
Threat analysis: DoppelPaymer ransomware
DoppelPaymer is a successor of BitPaymer ransomware, and is part of the Dridex malware family. It’s currently being distributed in various forms, including phishing or spam emails with attached documents that are embedded with malicious code — either JavaScript or VBScript. On execution, this code downloads DoppelPaymer’s first-stage loader on the victim’s machine. The attackers then use the PowerShell Empire toolkit to run a brute-force attack on Active Directory. The Mimikatz module is used to dump passwords from the system memory.
June 04, 2021 — 5 min read
Threat analysis: Pysa (Mespinoza) ransomware
June 04, 2021 — 5 min read
Threat analysis: Pysa (Mespinoza) ransomware
Pysa takes an approach commonly referred to as “big game hunting,” meaning that the ransomware group targets high-value assets in organizations that are particularly sensitive to data loss or system downtime. The idea is that victims — which may include healthcare providers, government agencies, and managed service providers — are more likely to quickly pay the ransom, regardless of its cost.
June 04, 2021 — 8 min read
Conti ransomware shuts down backup services and unlocks files with Windows Restart Manager
June 04, 2021 — 8 min read
Conti ransomware shuts down backup services and unlocks files with Windows Restart Manager
Conti ransomware shuts down backup services and unlocks files with Windows Restart Manager before encryption.