Back to homepage
Search in acronis websites
Try Now

Acronis Blog

TRU Security →
Updates from Acronis Threat Research Unit
Acronis Blog
MSP cybersecurity

All stories in MSP cybersecurity

November 09, 2026 — 4 min read
Beyond data, inside the attacks: Introducing Acronis TRU Cyber Pulse 2026
November 09, 2026 — 4 min read
Beyond data, inside the attacks: Introducing Acronis TRU Cyber Pulse 2026
Acronis TRU Cyber Pulse 2026 takes readers inside threat investigations to reveal how threat actors operate, the patterns connecting their campaigns and what defenders can learn from them.
June 25, 2021 — 3 min read
Welcome to Israel! Acronis opens new cyber protection R&D center
June 25, 2021 — 3 min read
Welcome to Israel! Acronis opens new cyber protection R&D center
While the power of remote work is strong, having research and development (R&D) facilities around the world enables you to attract the top talent and put them together in a place that’s equipped to let them create the next big thing. That’s why Acronis just opened a new office in Herzliya, Israel. The new office, which was officially opened on June 23, will focus on conducting cybersecurity research and development. The office will also enable Acronis to empower partners in the region – both current and new cloud partners – with local sales and marketing, technical, and educational support.
June 24, 2021 — 2 min read
Acronis Cyber Infrastructure 4.6 adds new features, optimizations
June 24, 2021 — 2 min read
Acronis Cyber Infrastructure 4.6 adds new features, optimizations
Acronis’ ongoing commitment to cyber protection requires continued innovation and refinement of our solutions — both to meet the shifting cyberthreat landscape, and to set users up for success with usability and customization improvements. To that end, we’ve recently released version 4.6 of Acronis Cyber Infrastructure. This update introduces new capabilities to further improve performance, usability, and security — as well as fixes for a few existing issues.
June 24, 2021 — 9 min read
What is machine learning? - Definition and Importance
June 24, 2021 — 9 min read
What is machine learning? - Definition and Importance
Many people do not understand the difference between terms such as artificial intelligence (AI), machine learning (ML), and other advanced computing concepts. If you are looking for clarification and want to learn why and how these technologies are used in modern cybersecurity solutions, this article will cover:
June 24, 2021 — 6 min read
What is Social Engineering?
June 24, 2021 — 6 min read
What is Social Engineering?
According to recent studies, cybercriminals use social engineering techniques to drive 98% of cyberattacks, making this an important topic of discussion for businesses and users. If your organization is a managed service provider (MSP), read on and discover how social engineering works and what you can do to help your clients protect their business from attacks.
June 24, 2021 — 6 min read
What is IT risk management?
June 24, 2021 — 6 min read
What is IT risk management?
Murphy has two laws, and both apply when it comes to IT risk management. “Anything that can go wrong, will go wrong” is Murphy’s first law, which is considered accurate because, given enough time, there is a high probability that anything will go wrong. You need to be prepared for anything! Murphy’s second law states that “nothing is as easy as it looks,” and this is also true when it comes to managing business risk.
June 10, 2021 — 3 min read
Stop email cyberthreats with Advanced Email Security
June 10, 2021 — 3 min read
Stop email cyberthreats with Advanced Email Security
94% of all malware and 96% of all social engineering attacks today are delivered through email. For managed service providers (MSPs), that makes email security a top priority but responding to this threat takes more than just adding a new cybersecurity tool to build services on top of.
June 04, 2021 — 5 min read
Threat analysis: DoppelPaymer ransomware
June 04, 2021 — 5 min read
Threat analysis: DoppelPaymer ransomware
DoppelPaymer is a successor of BitPaymer ransomware, and is part of the Dridex malware family. It’s currently being distributed in various forms, including phishing or spam emails with attached documents that are embedded with malicious code — either JavaScript or VBScript. On execution, this code downloads DoppelPaymer’s first-stage loader on the victim’s machine. The attackers then use the PowerShell Empire toolkit to run a brute-force attack on Active Directory. The Mimikatz module is used to dump passwords from the system memory.
June 04, 2021 — 5 min read
Threat analysis: Pysa (Mespinoza) ransomware
June 04, 2021 — 5 min read
Threat analysis: Pysa (Mespinoza) ransomware
Pysa takes an approach commonly referred to as “big game hunting,” meaning that the ransomware group targets high-value assets in organizations that are particularly sensitive to data loss or system downtime. The idea is that victims — which may include healthcare providers, government agencies, and managed service providers — are more likely to quickly pay the ransom, regardless of its cost.
June 04, 2021 — 8 min read
Conti ransomware shuts down backup services and unlocks files with Windows Restart Manager
June 04, 2021 — 8 min read
Conti ransomware shuts down backup services and unlocks files with Windows Restart Manager
Conti ransomware shuts down backup services and unlocks files with Windows Restart Manager before encryption.
June 04, 2021 — 8 min read
Sekhmet ransomware Analysis
June 04, 2021 — 8 min read
Sekhmet ransomware Analysis
Sekhmet ransomware, which first appeared in March 2020, has already disclosed the stolen data from at least six victims to date. One recent known attack that occurred on 20 June 2020 targeted SilPac, a gas handling solutions company based in Santa Clara, California.
June 04, 2021 — 7 min read
Analysis of Ragnar Locker Ransomware
June 04, 2021 — 7 min read
Analysis of Ragnar Locker Ransomware
The threat actor begin the attack by compromising the company’s network via RDP service, using brute force to guess weak passwords or with stolen credentials bought on the Dark Web. Next, the attacker performs second-stage reconnaissance. To elevate privileges, the attacker exploits the CVE-2017-0213 vulnerability in the Windows COM Aggregate Marshaler to run arbitrary code with elevated privileges.
June 01, 2021 — 3 min read
Will liability waivers help when clients won’t pay for cybersecurity?
June 01, 2021 — 3 min read
Will liability waivers help when clients won’t pay for cybersecurity?
The rise in cberthreats requires MSPs to make the cybersecurity of their clients a top priority. But what happens when an existing client or a prospect doesn’t think their business is at risk – and they don’t want to enforce the policies or pay for preventative measures you know will keep them secure? Many experts recommend using liability waivers to reduce the risk to your business when stubborn clients refuse to get on board with security. Sometimes, just presenting a waiver can get clients to realize the severity of the risk.