--- title: Acronis Threat Research Unit description: Get the latest cybersecurity updates and threat intelligence from Acronis Research Unit. Learn about the latest emerging cyberthreats and protection strategies. canonical_url: https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/17/ locale: en last_updated: 2026-10-27 --- * [Home](https://www.acronis.com/en/tru/) * [Articles](https://www.acronis.com/en/tru/posts/) * Acronis Threat Research Unit ![Image 1: Acronis Threat Research Unit](https://staticfiles.acronis.com/images/content/d8af6fc5b7ea4b37af377b4993c2a572.png) # Acronis Threat Research Unit Threat Research Unit is a dedicated Acronis unit composed of experienced cybersecurity experts. Our team includes cross-functional experts in cybersecurity, AI, and threat intelligence. We are empowering IT teams with intelligence-driven cyberthreat research and reporting. 05 February 2024 ### [MSP cybersecurity news digest: Feb. 5, 2024](https://www.acronis.com/en/tru/posts/msp-cybersecurity-news-digest-feb-5-2024/) The February 5, 2024 MSP cybersecurity news digest features Water services giants Veolia North America the U.K.'s Southern Water hit in separate cyberattacks; AnyDesk confirms a cyberattack; AllaKore RAT malware targets Mexican firms; Medusa ransomware attacks the Kansas City Area Transportation Authority, etc. 25 January 2024 ### [MSP cybersecurity news digest: Jan. 25, 2024](https://www.acronis.com/en/tru/posts/msp-cybersecurity-news-digest-jan-25-2024/) The MSP cybersecurity news digest for January 25, 2024 features a Tietoevry ransomware attack; a Google fix of a zero-day vulnerability; a TeamViewer exploit; a Remcos RAT trojan discovered in South Korea; and WasabiSeed and Screenshotter phishing malware. 22 January 2024 ### [Year-end perfect result for Acronis Cyber Platform for macOS by AV-Test.org](https://www.acronis.com/en/tru/posts/year-end-perfect-result-for-acronis-cyber-protect-cloud-for-macos-by-av-testorg/) For more than a year, Acronis Cyber Platform with Advanced Security has achieved a perfect score in every AV-Test regular certification under macOS. The solution's real-time protection mechanisms, coupled with advanced threat detection algorithms, earned it a perfect score in December’s evaluation, where it detected 100% of 1,298 samples of widespread and prevalent malware chosen by AV-Test. 10 January 2024 ### [CustomLoader: A malicious link](https://www.acronis.com/en/tru/posts/customloader-a-malicious-link/) CustomerLoader was first spotted in June 2023, delivering different payloads to its targets. It is a .NET loader, so named from the ‘custom’ string in its C&C communication. In this campaign, it used a .LNK file to bring the DuckTail infostealer to victims' machines. DuckTail is a Vietnamese threat group that became active in May 2023. Using phishing job listings on LinkedIn, DuckTail delivers malicious files to victims. 21 December 2023 ### [Transforming incident management with the power of AI](https://www.acronis.com/en/tru/posts/transforming-incident-management-the-power-of-ai-in-acronis-cyber-protect-cloud-advanced-security-edr/) With cyberthreats becoming more sophisticated, Acronis Cyber Platform stands out as a robust solution that not only safeguards your data and systems but also revolutionizes incident management through the integration of cutting-edge artificial intelligence (AI) technology. And, as you may know, Acronis recently released Cyber Platform Advanced Security + EDR, to extend the core product's functionality. 12 December 2023 ### [Acronis Cyberthreats Update, December 2023](https://www.acronis.com/en/tru/posts/acronis-cyberthreats-update-december-2023/) The Acronis Cyberthreats Update covers current cyberthreat activity and trends, as observed by Acronis analysts and sensors. Figures presented here were gathered in November of this year and reflect threats that we detected as well as news stories from the public domain. This report represents a global outlook and is based on more than one million unique endpoints distributed around the world. 16 November 2023 ### [DarkGate relies on malicious AutoIt scripts](https://www.acronis.com/en/tru/posts/darkgate-relies-on-malicious-autoit-scripts/) DarkGate was first spotted in 2018. New attacks have used Skype messages with malicious VBA attachments. The main purpose of this script is to download and execute the AutoIt script, which has been observed in DarkGate campaigns since 2020. A user with the name ‘RastaFarEye’ advertised his malware on underground Russian language forums, and it now has numerous capabilities. 15 November 2023 ### [Ransomware diaries, part 1: QazLocker -Cyb3rK1dZ has more time than skills](https://www.acronis.com/en/tru/posts/ransomware-diaries-part-1-qazlocker-cyb3rk1dz-has-more-time-than-skills/) This article is the first in the ransomware diaries series. We will provide an in-depth look at some active ransomware families, such as Mallox or encryptors from the Epsilon Gang, revealing the unique picture they occasionally paint, along with commonalities they maintain along the way. Every family will represent a different piece of the current ransomware landscape to showcase how diversified it has become over the years. 06 November 2023 ### [Acronis Cyberthreats Update, November 2023](https://www.acronis.com/en/tru/posts/acronis-cyberthreats-update-november-2023/) The Acronis Cyberthreats Update covers current cyberthreat activity and trends, as observed by Acronis analysts and sensors. Figures presented here were gathered in October of this year and reflect threats that we detected as well as news stories from the public domain. This report represents a global outlook and is based on more than one million unique endpoints distributed around the world. 02 November 2023 ### [AV-Test results: Acronis Cyber Platform scores 10/10 in Advanced Threat Protection](https://www.acronis.com/en/tru/posts/av-test-results-acronis-cyber-protect-cloud-scores-10-10-in-advanced-threat-protection/) AV-Test unveiled their Advanced Threat Protection test results for 10 real-life scenarios they ran in July and August 2023 in Windows 10 Professional. Once again, Acronis Cyber Platform with Advanced Security received the best possible score, successfully detecting and blocking all 10 attacks in their early stages. 30 October 2023 ### [Knight: An analysis of Cyclops’ ransomware successor](https://www.acronis.com/en/tru/posts/knight-an-analysis-of-cyclops-ransomware-successor/) At the end of July 2023, the Cyclops ransomware group announced on underground forums that the 2.0 version of their ransomware was renamed “Knight.” The Knight ransomware group began its ransomware-as-a-service operations in May 2023, targeting Windows, Linux and MacOS operating systems, encrypting files using Curve25519, HC-256 and ChaCha20 algorithms. 26 October 2023 ### [Acronis Cyber Protect gets perfect score in AV-Test evaluation of security products for macOS](https://www.acronis.com/en/tru/posts/acronis-cyber-protect-achieves-a-perfect-score-in-the-av-test-evaluation-of-security-products-for-macos/) Acronis Cyber Protect is a long-time participant in the AV-Test independent evaluation of security products for Apple’s macOS. It is critical that a cybersecurity product is consistent with good results, as new threats emerge. We are proud to report that Cyber Protect has achieved a perfect 6 out of 6 score in each and every test performed in the last year. [1](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/1/)...[15](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/15/) [16](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/16/) [17](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/17/) [18](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/18/) [19](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/19/)...[27](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/27/)