--- title: Acronis Threat Research Unit description: Get the latest cybersecurity updates and threat intelligence from Acronis Research Unit. Learn about the latest emerging cyberthreats and protection strategies. canonical_url: https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/22/ locale: en last_updated: 2026-10-27 --- * [Home](https://www.acronis.com/en/tru/) * [Articles](https://www.acronis.com/en/tru/posts/) * Acronis Threat Research Unit ![Image 1: Acronis Threat Research Unit](https://staticfiles.acronis.com/images/content/d8af6fc5b7ea4b37af377b4993c2a572.png) # Acronis Threat Research Unit Threat Research Unit is a dedicated Acronis unit composed of experienced cybersecurity experts. Our team includes cross-functional experts in cybersecurity, AI, and threat intelligence. We are empowering IT teams with intelligence-driven cyberthreat research and reporting. 25 July 2022 ### [Building materials firm Knauf hit by Black Basta ransomware](https://www.acronis.com/en/tru/posts/building-materials-firm-knauf-hit-by-black-basta-ransomware/) The Knauf Group, a German-based multinational producer of construction materials, has announced that it's been the target of a cyberattack. The incident took place on the night of June 29, forcing its global IT team to shut down email systems, although communications were still possible via mobile devices and Microsoft Teams. 19 July 2022 ### [Bandai Namco hit by BlackCat ransomware](https://www.acronis.com/en/tru/posts/bandai-namco-hit-by-blackcat-ransomware/) The Japanese video game giant Bandai Namco, known for publishing franchises like Elden Ring, Pac-Man and Tekken, has been hit by BlackCat/AlphV ransomware. 09 July 2022 ### [Google releases several vulnerability fixes for Chrome browser](https://www.acronis.com/en/tru/posts/google-releases-several-vulnerability-fixes-for-chrome-browser/) Google has released updates for its popular Chrome browser to remediate several vulnerabilities, including a high-severity vulnerability that has already been exploited in the wild. This marks the fourth zero-day vulnerability that had to be patched in Chrome this year. 28 June 2022 ### [Important details About BlackCat: The new version of the ALPHV ransomware-as-a-service](https://www.acronis.com/en/tru/posts/important-details-about-blackcat-the-new-version-of-the-alphv-ransomware-as-a-service/) On March 16, 2022, security specialists identified a new version of BlackCat ransomware (so named because the software displays a black cat on the victim’s payment site). These experts also noted that some previous YARA rules no longer match, which will make it difficult to find malicious files. 15 June 2022 ### [MSDT "Follina" vulnerability exploited in attacks against U.S., European governments](https://www.acronis.com/en/tru/posts/msdt-follina-vulnerability-exploited-in-attacks-against-us-european-governments/) An unpatched remote code execution vulnerability in the Microsoft Windows Support Diagnostic Tool (MSDT), which is being tracked as CVE-2022-30192, is being exploited in phishing campaigns that are targeting U.S. and European government organizations. 14 June 2022 ### [Vice Society ransomware hits Italian city of Palermo](https://www.acronis.com/en/tru/posts/vice-society-ransomware-hits-italian-city-of-palermo/) Palermo, a city of 1.3 million people and a popular tourist destination in Southern Italy, has become the latest victim of a Vice Society ransomware attack. 08 June 2022 ### [Austrian state of Carinthia hit by BlackCat ransomware](https://www.acronis.com/en/tru/posts/austrian-state-of-carinthia-hit-by-blackcat-ransomware/) Carinthia, the southernmost state in Austria, has had their computer systems encrypted by BlackCat (ALPHV) ransomware, causing a severe disruption of government services. 31 May 2022 ### [Snake keylogger spreads through malicious PDFs](https://www.acronis.com/en/tru/posts/snake-keylogger-spreads-through-malicious-pdfs/) A new malware distribution campaign is embedding malicious Microsoft Word documents inside PDF files, prompting victims to launch the Word document as soon as the PDF is opened. 11 May 2022 ### [Agriculture equipment manufacturer AGCO hit by ransomware](https://www.acronis.com/en/tru/posts/agriculture-equipment-manufacturer-agco-hit-by-ransomware/) Global agricultural equipment company AGCO, creator of Fendt tractors and other popular tools, has been knocked offline by a ransomware attack. 10 May 2022 ### [Twitter phishing scams target verified accounts](https://www.acronis.com/en/tru/posts/twitter-phishing-scams-target-verified-accounts/) Recent phishing campaigns are targeting verified Twitter profiles with convincing emails, enticing victims to provide their Twitter credentials — supposedly in order to fix a problem with their verification badge. 30 April 2022 ### [New ransomware gang "Black Basta" emerges](https://www.acronis.com/en/tru/posts/new-ransomware-gang-black-basta-emerges/) A new ransomware known as Black Basta has emerged, attacking at least 12 companies within its first three weeks of operation — including the American Dental Association and wind farm operator Deutsche Windtechnik. 22 April 2022 ### [HermeticWiper and HermeticRansom delivered via Active Directory GPO](https://www.acronis.com/en/tru/posts/hermeticwiper-and-hermeticransom-delivered-via-active-directory-gpo/) On February 23, 2022, a new data wiper and ransomware were deployed on a large number of devices in the Ukraine, as ESET Research reported on Twitter. Just before this, a couple of Ukrainian government sites and services were subjected to DDoS attacks. Cybersecurity specialists discovered that the malware was deployed via Microsoft Active Directory GPO. In addition to the disk wiper and ransomware, a worm component was deploy [1](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/1/)...[20](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/20/) [21](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/21/) [22](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/22/) [23](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/23/) [24](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/24/)...[27](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/27/)