--- title: Acronis Threat Research Unit description: Get the latest cybersecurity updates and threat intelligence from Acronis Research Unit. Learn about the latest emerging cyberthreats and protection strategies. canonical_url: https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/6/ locale: en last_updated: 2026-10-27 --- * [Home](https://www.acronis.com/en/tru/) * [Articles](https://www.acronis.com/en/tru/posts/) * Acronis Threat Research Unit ![Image 1: Acronis Threat Research Unit](https://staticfiles.acronis.com/images/content/d8af6fc5b7ea4b37af377b4993c2a572.png) # Acronis Threat Research Unit Threat Research Unit is a dedicated Acronis unit composed of experienced cybersecurity experts. Our team includes cross-functional experts in cybersecurity, AI, and threat intelligence. We are empowering IT teams with intelligence-driven cyberthreat research and reporting. 08 December 2025 ### [MSP cybersecurity news digest, November 17, 2025](https://www.acronis.com/en/tru/posts/msp-cybersecurity-news-digest-november-17-2025/) DanaBot resurfaces, resumes Windows infections after six-month shutdown, Mass phishing campaign targets hotel bookings with 4,300 fake sites, and more. These are the latest threats to MSP security. 08 December 2025 ### [Makop ransomware: GuLoader and privilege escalation in attacks against Indian businesses](https://www.acronis.com/en/tru/posts/makop-ransomware-guloader-and-privilege-escalation-in-attacks-against-indian-businesses/) Makop, a ransomware strain derived from Phobos, continues to exploit exposed RDP systems while adding new components such as local privilege escalation exploits and loader malware to its traditional toolkit. 18 November 2025 ### [Acronis Cyberthreats Update, November 2025](https://www.acronis.com/en/tru/posts/acronis-cyberthreats-update-november-2025/) The Acronis Cyberthreats Update covers current cyberthreat activity and trends, as observed by Acronis Threat Research Unit (TRU) and Acronis sensors. Figures presented here were gathered in October 2025 and reflect threats that Acronis detected, as well as news stories from the public domain. 10 November 2025 ### [MSP cybersecurity news digest November 10, 2025](https://www.acronis.com/en/tru/posts/msp-cybersecurity-news-digest-november-10-2025/) Must-know cybersecurity news for MSPs: GlassWorm, ClickFix, Gootloader and the dangerous new era of AI-powered malware. Review key threats and a major public-sector breach. 07 November 2025 ### [MSP cybersecurity news digest, November 3, 2025](https://www.acronis.com/en/tru/posts/msp-cybersecurity-news-digest-november-3-2025/) Qilin ransomware abuses Windows Subsystem for Linux to deploy Linux encryptors on Windows, Atroposia malware includes built-in vulnerability scanner for targeted exploitation, and more. Here are the latest threats to MSP security. 04 November 2025 ### [MSP cybersecurity news digest, October 21, 2025](https://www.acronis.com/en/tru/posts/msp-cybersecurity-news-digest-october-21-2025/) Here is the MSP cybersecurity news digest for October 21, 2025 from the Acronis Threat Research Unit (TRU). 28 October 2025 ### [MSP cybersecurity news digest, October 28, 2025](https://www.acronis.com/en/tru/posts/msp-cybersecurity-news-digest-october-28-2025/) Urgent WSUS RCE flaw actively exploited! Plus: Fake LastPass inheritance emails steal vaults, Iran's MuddyWater APT targets government entities and a new RedTiger Discord infostealer. 17 October 2025 ### [Acronis Cyberthreats Update, October 2025](https://www.acronis.com/en/tru/posts/acronis-cyberthreats-update-october-2025/) The Acronis Cyberthreats Update covers current cyberthreat activity and trends, as observed by Acronis Threat Research Unit (TRU) and Acronis sensors. Figures presented here were gathered in September 2025 and reflect threats that Acronis detected, as well as news stories from the public domain. 13 October 2025 ### [MSP cybersecurity news digest, October 13, 2025](https://www.acronis.com/en/tru/posts/msp-cybersecurity-news-digest-october-13-2025/) Medusa exploits GoAnywhere MFT, Discord data leaks via Zendesk, plus Vampire Bot and Qilin ransomware attacks. Get the critical MSP cybersecurity news and defense actions now. 06 October 2025 ### [MSP cybersecurity news digest, October 6, 2025](https://www.acronis.com/en/tru/posts/msp-cybersecurity-news-digest-october-6-2025/) Harrods breach tied to supplier compromise leaks 430,000 records, MatrixPDF toolkit weaponizes PDFs for phishing and malware delivery, and more. Here are the latest threats to MSP security. 29 September 2025 ### [MSP cybersecurity news digest, September 29, 2025](https://www.acronis.com/en/tru/posts/msp-cybersecurity-news-digest-september-29-2025/) Here is the Acronis Threat Research Unit (TRU) MSP cybersecurity news digest, September 29, 2025 25 September 2025 ### [ARINC’s common-use passenger processing system MUSE Disruption Impacts Flights Across Europe](https://www.acronis.com/en/tru/posts/arincs-common-use-passenger-processing-system-muse-disruption-impacts-flights-across-europe/) Major European airports including Heathrow, Brussels, Berlin, and Dublin have reported disruptions in check-in, boarding, and kiosk systems. The outages have been linked to Collins Aerospace’s passenger processing platform MUSE, a system used across many international airports. [1](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/1/)...[4](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/4/) [5](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/5/) [6](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/6/) [7](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/7/) [8](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/8/)...[27](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/27/)