Back to homepage
Search in acronis websites
Try Now

Acronis Blog

TRU Security →
Updates from Acronis Threat Research Unit
Acronis Blog
MSP cybersecurity

All stories in MSP cybersecurity

October 16, 2026 — 5 min read
Acronis Accelerate: Missed it? Now is your time to act
October 16, 2026 — 5 min read
Acronis Accelerate: Missed it? Now is your time to act
Missed Acronis Accelerate: Time to act? Watch how AI and automation can transform the MSP workday with automated client onboarding, 24/7 MDR and Cyber Frame.
June 24, 2021 — 6 min read
What is IT risk management?
June 24, 2021 — 6 min read
What is IT risk management?
Murphy has two laws, and both apply when it comes to IT risk management. “Anything that can go wrong, will go wrong” is Murphy’s first law, which is considered accurate because, given enough time, there is a high probability that anything will go wrong. You need to be prepared for anything! Murphy’s second law states that “nothing is as easy as it looks,” and this is also true when it comes to managing business risk.
June 10, 2021 — 3 min read
Stop email cyberthreats with Advanced Email Security
June 10, 2021 — 3 min read
Stop email cyberthreats with Advanced Email Security
94% of all malware and 96% of all social engineering attacks today are delivered through email. For managed service providers (MSPs), that makes email security a top priority but responding to this threat takes more than just adding a new cybersecurity tool to build services on top of.
June 04, 2021 — 5 min read
Threat analysis: DoppelPaymer ransomware
June 04, 2021 — 5 min read
Threat analysis: DoppelPaymer ransomware
DoppelPaymer is a successor of BitPaymer ransomware, and is part of the Dridex malware family. It’s currently being distributed in various forms, including phishing or spam emails with attached documents that are embedded with malicious code — either JavaScript or VBScript. On execution, this code downloads DoppelPaymer’s first-stage loader on the victim’s machine. The attackers then use the PowerShell Empire toolkit to run a brute-force attack on Active Directory. The Mimikatz module is used to dump passwords from the system memory.
June 04, 2021 — 5 min read
Threat analysis: Pysa (Mespinoza) ransomware
June 04, 2021 — 5 min read
Threat analysis: Pysa (Mespinoza) ransomware
Pysa takes an approach commonly referred to as “big game hunting,” meaning that the ransomware group targets high-value assets in organizations that are particularly sensitive to data loss or system downtime. The idea is that victims — which may include healthcare providers, government agencies, and managed service providers — are more likely to quickly pay the ransom, regardless of its cost.
June 04, 2021 — 8 min read
Conti ransomware shuts down backup services and unlocks files with Windows Restart Manager
June 04, 2021 — 8 min read
Conti ransomware shuts down backup services and unlocks files with Windows Restart Manager
Conti ransomware shuts down backup services and unlocks files with Windows Restart Manager before encryption.
June 04, 2021 — 8 min read
Sekhmet ransomware Analysis
June 04, 2021 — 8 min read
Sekhmet ransomware Analysis
Sekhmet ransomware, which first appeared in March 2020, has already disclosed the stolen data from at least six victims to date. One recent known attack that occurred on 20 June 2020 targeted SilPac, a gas handling solutions company based in Santa Clara, California.
June 04, 2021 — 7 min read
Analysis of Ragnar Locker Ransomware
June 04, 2021 — 7 min read
Analysis of Ragnar Locker Ransomware
The threat actor begin the attack by compromising the company’s network via RDP service, using brute force to guess weak passwords or with stolen credentials bought on the Dark Web. Next, the attacker performs second-stage reconnaissance. To elevate privileges, the attacker exploits the CVE-2017-0213 vulnerability in the Windows COM Aggregate Marshaler to run arbitrary code with elevated privileges.
June 01, 2021 — 3 min read
Will liability waivers help when clients won’t pay for cybersecurity?
June 01, 2021 — 3 min read
Will liability waivers help when clients won’t pay for cybersecurity?
The rise in cberthreats requires MSPs to make the cybersecurity of their clients a top priority. But what happens when an existing client or a prospect doesn’t think their business is at risk – and they don’t want to enforce the policies or pay for preventative measures you know will keep them secure? Many experts recommend using liability waivers to reduce the risk to your business when stubborn clients refuse to get on board with security. Sometimes, just presenting a waiver can get clients to realize the severity of the risk.
May 26, 2021 — 2 min read
Acronis wins Most Innovative Solution award at ASCII Success Summit
May 26, 2021 — 2 min read
Acronis wins Most Innovative Solution award at ASCII Success Summit
We’re thrilled to announce that Acronis has been awarded Most Innovative Solution at the first live ASCII Summit of 2021. This award acknowledges the significant evolution that Acronis has made from backup vendor to cyber protection partner of the global MSP channel community.
May 20, 2021 — 3 min read
What goes into a strong, modern cyber protection stack
May 20, 2021 — 3 min read
What goes into a strong, modern cyber protection stack
For service providers, cybersecurity services are in demand. Building tailored cybersecurity bundles that ensure client protection while earning you the most profit, however, is more complicated than it seems. Build your security services bundle (or bundles) with this handy guide to the services and components that help you find the best results for your organization and your clients.
May 20, 2021 — 2 min read
How (and why) to build your cybersecurity services bundle
May 20, 2021 — 2 min read
How (and why) to build your cybersecurity services bundle
MSPs looking to build an impenetrable cybersecurity wall face a complex and process. Targets are shifting quickly as AI and other technologies give offenders more firepower and stealthier weapons for their attacks. And while foolproof cybersecurity may not always be possible, your clients still need and deserve the best protection available. Designing bundled cybersecurity services within your offering is the best way to deliver them.
May 20, 2021 — 6 min read
3 Ways to avoid malware infection in software patches
May 20, 2021 — 6 min read
3 Ways to avoid malware infection in software patches
The objective of a software patch is to eliminate a vulnerability or fix a software flaw that is identified after the software is released, add new functionality or improve performance. Timely installation of newly released patches is an important maintenance step. It keeps your systems current and stable, optimizes performance, and mitigates the threat of new malware infection.