--- title: Acronis Threat Research Unit description: Get the latest cybersecurity updates and threat intelligence from Acronis Research Unit. Learn about the latest emerging cyberthreats and protection strategies. canonical_url: https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/23/ locale: en last_updated: 2026-10-27 --- * [Home](https://www.acronis.com/en/tru/) * [Articles](https://www.acronis.com/en/tru/posts/) * Acronis Threat Research Unit ![Image 1: Acronis Threat Research Unit](https://staticfiles.acronis.com/images/content/d8af6fc5b7ea4b37af377b4993c2a572.png) # Acronis Threat Research Unit Threat Research Unit is a dedicated Acronis unit composed of experienced cybersecurity experts. Our team includes cross-functional experts in cybersecurity, AI, and threat intelligence. We are empowering IT teams with intelligence-driven cyberthreat research and reporting. 21 April 2022 ### [Nordex Group struck by Conti ransomware](https://www.acronis.com/en/tru/posts/nordex-group-struck-by-conti-ransomware/) The Nordex Group, known as one of the world's largest manufacturers of wind turbines, has confirmed a cyberattack. The attack was discovered end of last month, and Nordex disabled remote access from some networks to their turbines as a precaution. 08 April 2022 ### [WhatsApp phishing campaign uses fake voice messages](https://www.acronis.com/en/tru/posts/whatsapp-phishing-campaign-uses-fake-voice-messages/) A new phishing campaign, which uses fake WhatsApp voice messages to trick victims into installing infostealing malware, has already targeted over 27,000 users. 08 April 2022 ### [New RAT "Borat" is a triple threat](https://www.acronis.com/en/tru/posts/new-rat-borat-is-a-triple-threat/) A new remote access Trojan (RAT) by the name of Borat has been appearing on darknet markets. Borat is designed to be easy-to-use, and gives attackers the ability to deploy ransomware, perform DDoS attacks, bypass user account control (UAC), access files and network devices, and even take complete control of a victim's mouse and keyboard. 30 March 2022 ### [Urgent update issued for Google Chrome](https://www.acronis.com/en/tru/posts/urgent-update-issued-for-google-chrome/) Google has issued an update for its Chrome browser that patches the second "high severity" zero-day vulnerability this year. All 3.2 billion Chrome users are urged to update to Chrome 99.0.4844.84 for Windows, Mac, or Linux immediately. 16 March 2022 ### [WhisperGate malware targets Ukrainian government sites](https://www.acronis.com/en/tru/posts/whispergate-malware-targets-ukrainian-government-sites/) Multiple government sites in Ukraine were shut down on January 13, 2022, the result of a large-scale cyberattack by the WhisperGate malware. Microsoft Intelligence named this activity "DEV-0586" and identified it as destructive malware that used to be ransomware. Its main purpose is to disrupt the system and damage files beyond the possibility of their recovery. 15 March 2022 ### [Auto giant DENSO hit by Pandora ransomware](https://www.acronis.com/en/tru/posts/auto-giant-denso-hit-by-pandora-ransomware/) Pandora ransomware has hit the Japan-based DENSO Corporation, one of the largest automotive parts manufacturers in the world. DENSO — which has more than 200 subsidiaries, almost 170,000 employees, and an annual revenue of over $44 billion — provides parts to Toyota, who just dealt with their own cyberattack, as well as Mercedes-Benz, Fiat, and others. 10 March 2022 ### [Samsung compromised by Lapsus$ ransomware](https://www.acronis.com/en/tru/posts/samsung-compromised-by-lapsus-ransomware/) The Lapsus$ ransomware group has attacked Samsung Electronics, and leaked 190 GB of data — including the source code of bootloaders, activation servers, and trusted applets. 25 February 2022 ### [Logistics giant Expeditors hit by cyberattack](https://www.acronis.com/en/tru/posts/logistics-giant-expeditors-hit-by-cyberattack/) Expeditors, a global logistics giant and top-five freight management company by revenue, recently suffered a cyberattack. The incident appears to involve ransomware. 22 February 2022 ### [Storm Ylenia disrupts German business operations](https://www.acronis.com/en/tru/posts/storm-ylenia-disrupts-german-business-operations/) Storm Ylenia caused chaos in Germany last week, bringing gale-force winds that toppled trees, caused power outages, and even forced the shutdown of long-distance trains in seven of the country's states. 12 February 2022 ### [Cyberattack hits Vodafone Portugal, impacting millions of customers](https://www.acronis.com/en/tru/posts/cyberattack-hits-vodafone-portugal-impacting-millions-of-customers/) Vodafone Portugal, a subsidary of UK-based Vodafone Group, has had to take their networks offline after they became the victim of a cyberattack. 29 January 2022 ### [Collectors of Ozzy Osbourne's NFTs lose thousands in phishing scam](https://www.acronis.com/en/tru/posts/collectors-of-ozzy-osbournes-nfts-lose-thousands-in-phishing-scam/) Famed rock star Ozzy Osbourne recently announced a new NFT project by the name of CryptoBatz. After a change in promotional URLs, phishers were able to steal more than $40,000 from over 1,300 unsuspecting collectors looking to buy NFTs from CryptoBatz. 24 January 2022 ### [BHUNT malware targets cryptocurrency users](https://www.acronis.com/en/tru/posts/bhunt-malware-targets-cryptocurrency-users/) A new infostealer called BHUNT is looting cryptocurrency wallet contents, passwords, and security phrases. [1](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/1/)...[21](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/21/) [22](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/22/) [23](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/23/) [24](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/24/) [25](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/25/) [26](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/26/) [27](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/27/)