Acronis TRU
Acronis Threat Research Unit

Acronis Threat Research Unit

Threat Research Unit is a dedicated Acronis unit composed of experienced cybersecurity experts. Our team includes cross-functional experts in cybersecurity, AI, and threat intelligence. We are empowering IT teams with intelligence-driven cyberthreat research and reporting.

February 20, 2024

MSP cybersecurity news digest: Feb. 20, 2024

The February 20, 2024 MSP cybersecurity news digest features Microsoft's February Patch Tuesday fixes; Prudential Financial is cyberattacked; New Qbot malware variant uses fake Adobe Installer in email campaigns; Bank of America suffers a data breach; and a cyberattack of German battery maker Varta.

February 14, 2024

MSP cybersecurity news digest: Feb. 14, 2024

The February 14, 2024 MSP cybersecurity news digest features a Cactus ransomware attack on Schneider Electric; Global fintech firm EquiLend experiences a cyberattack; Hyundai Motor Europe hit by Black Basta ransomware; data breaches at French health care providers Viamedis and Almerys, etc.

February 13, 2024

Acronis Cyberthreats Update, February 2024

The Acronis Cyberthreats Update covers current cyberthreat activity and trends, as observed by Acronis analysts and sensors. Figures presented here were gathered in January of this year and reflect threats that we detected as well as news stories from the public domain.

February 05, 2024

MSP cybersecurity news digest: Feb. 5, 2024

The February 5, 2024 MSP cybersecurity news digest features Water services giants Veolia North America the U.K.'s Southern Water hit in separate cyberattacks; AnyDesk confirms a cyberattack; AllaKore RAT malware targets Mexican firms; Medusa ransomware attacks the Kansas City Area Transportation Authority, etc.

January 25, 2024

MSP cybersecurity news digest: Jan. 25, 2024

The MSP cybersecurity news digest for January 25, 2024 features a Tietoevry ransomware attack; a Google fix of a zero-day vulnerability; a TeamViewer exploit; a Remcos RAT trojan discovered in South Korea; and WasabiSeed and Screenshotter phishing malware.

January 22, 2024

Year-end perfect result for Acronis Cyber Platform for macOS by AV-Test.org

For more than a year, Acronis Cyber Platform with Advanced Security has achieved a perfect score in every AV-Test regular certification under macOS. The solution's real-time protection mechanisms, coupled with advanced threat detection algorithms, earned it a perfect score in December’s evaluation, where it detected 100% of 1,298 samples of widespread and prevalent malware chosen by AV-Test.

January 10, 2024

CustomLoader: A malicious link

CustomerLoader was first spotted in June 2023, delivering different payloads to its targets. It is a .NET loader, so named from the ‘custom’ string in its C&C communication. In this campaign, it used a .LNK file to bring the DuckTail infostealer to victims' machines. DuckTail is a Vietnamese threat group that became active in May 2023. Using phishing job listings on LinkedIn, DuckTail delivers malicious files to victims.

December 21, 2023

Transforming incident management with the power of AI

With cyberthreats becoming more sophisticated, Acronis Cyber Platform stands out as a robust solution that not only safeguards your data and systems but also revolutionizes incident management through the integration of cutting-edge artificial intelligence (AI) technology. And, as you may know, Acronis recently released Cyber Platform Advanced Security + EDR, to extend the core product's functionality.

December 12, 2023

Acronis Cyberthreats Update, December 2023

The Acronis Cyberthreats Update covers current cyberthreat activity and trends, as observed by Acronis analysts and sensors. Figures presented here were gathered in November of this year and reflect threats that we detected as well as news stories from the public domain. This report represents a global outlook and is based on more than one million unique endpoints distributed around the world.

November 16, 2023

DarkGate relies on malicious AutoIt scripts

DarkGate was first spotted in 2018. New attacks have used Skype messages with malicious VBA attachments. The main purpose of this script is to download and execute the AutoIt script, which has been observed in DarkGate campaigns since 2020. A user with the name ‘RastaFarEye’ advertised his malware on underground Russian language forums, and it now has numerous capabilities.

November 15, 2023

Ransomware diaries, part 1: QazLocker -Cyb3rK1dZ has more time than skills

This article is the first in the ransomware diaries series. We will provide an in-depth look at some active ransomware families, such as Mallox or encryptors from the Epsilon Gang, revealing the unique picture they occasionally paint, along with commonalities they maintain along the way. Every family will represent a different piece of the current ransomware landscape to showcase how diversified it has become over the years.

November 06, 2023

Acronis Cyberthreats Update, November 2023

The Acronis Cyberthreats Update covers current cyberthreat activity and trends, as observed by Acronis analysts and sensors. Figures presented here were gathered in October of this year and reflect threats that we detected as well as news stories from the public domain. This report represents a global outlook and is based on more than one million unique endpoints distributed around the world.