--- title: Acronis Threat Research Unit description: Get the latest cybersecurity updates and threat intelligence from Acronis Research Unit. Learn about the latest emerging cyberthreats and protection strategies. canonical_url: https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/7/ locale: en last_updated: 2026-10-27 --- * [Home](https://www.acronis.com/en/tru/) * [Articles](https://www.acronis.com/en/tru/posts/) * Acronis Threat Research Unit ![Image 1: Acronis Threat Research Unit](https://staticfiles.acronis.com/images/content/d8af6fc5b7ea4b37af377b4993c2a572.png) # Acronis Threat Research Unit Threat Research Unit is a dedicated Acronis unit composed of experienced cybersecurity experts. Our team includes cross-functional experts in cybersecurity, AI, and threat intelligence. We are empowering IT teams with intelligence-driven cyberthreat research and reporting. 23 September 2025 ### [MSP cybersecurity news digest, September 23, 2025](https://www.acronis.com/en/tru/posts/msp-cybersecurity-news-digest-september-23-2025/) Here is the weekly digest with news from Acronis TRU for the week of September 23, 2025 11 September 2025 ### [Acronis Cyberthreats Update, September 2025](https://www.acronis.com/en/tru/posts/acronis-cyberthreats-update-september-2025/) The Acronis Cyberthreats Update covers current cyberthreat activity and trends, as observed by Acronis Threat Research Unit (TRU) and Acronis sensors. Figures presented here were gathered in August 2025 and reflect threats that Acronis detected, as well as news stories from the public domain. 03 September 2025 ### [Trojanized ScreenConnect installers evolve, dropping multiple RATs on a single machine](https://www.acronis.com/en/tru/posts/trojanized-screenconnect-installers-evolve-dropping-multiple-rats-on-a-single-machine/) Over the past months, Acronis TRU (Threat Research Unit) has identified multiple active and ongoing campaigns leveraging trojanized versions of ConnectWise ScreenConnect to gain initial access to victim networks and compromise target machines. 01 September 2025 ### [MSP cybersecurity news digest, September 1, 2025](https://www.acronis.com/en/tru/posts/msp-cybersecurity-news-digest-september-1-2025/) Stay informed on the latest cyber threats: The Orange Belgium data breach affects 850,000 customers. The Warlock ransomware gang targets UK telecom Colt Technology Services, auctioning stolen documents. A Miljödata attack disrupts services for hundreds of Swedish municipalities. Learn about the ZipLine campaign targeting US supply chain manufacturers with MixShell Malware, and the ShadowSilk data exfiltration group. 25 August 2025 ### [MSP cybersecurity news digest, August 25, 2025](https://www.acronis.com/en/tru/posts/msp-cybersecurity-news-digest-august-25-2025/) Microsoft patches 107 vulnerabilities, including Windows Kerberos zero day, PEAR ransomware gang leaks 1.26TB of Alt Vision data, and more. Here are the latest threats to MSP security. 21 August 2025 ### [MSP cybersecurity news digest, August 13, 2025](https://www.acronis.com/en/tru/posts/msp-cybersecurity-news-digest-august-13-2025/) Clinical data stolen in cyberattack on dialysis provider DaVita, Chanel, Pandora, Google and Cisco suffer data breaches, and more. Here are the latest threats to MSP security. 18 August 2025 ### [MSP cybersecurity news digest, August 4, 2025](https://www.acronis.com/en/tru/posts/msp-cybersecurity-news-digest-august-4-2025/) Scattered Spider group disrupted, but imitators carry on, Fake OAuth apps and Tycoon phishing kit used to hijack Microsoft 365 accounts, and more. Here are the latest threats to MSP security. 11 August 2025 ### [Acronis Cyberthreats Update, August 2025](https://www.acronis.com/en/tru/posts/acronis-cyberthreats-update-august-2025/) The Acronis Cyberthreats Update covers current cyberthreat activity and trends, as observed by Acronis Threat Research Unit (TRU) and Acronis sensors. Figures presented here were gathered in July 2025 and reflect threats that Acronis detected, as well as news stories from the public domain. 05 August 2025 ### [MSP cybersecurity news digest, July 29, 2025](https://www.acronis.com/en/tru/posts/msp-cybersecurity-news-digest-july-29-2025/) Benign-appearing panda images used by new Koske Linux malware to deliver malicious code, Turkish defense firms targeted through Patchwork spear-phishing campaign, and more. Here are the latest threats to MSP security. 04 August 2025 ### [MSPs a top target for Akira and Lynx ransomware](https://www.acronis.com/en/tru/posts/msps-a-top-target-for-akira-and-lynx-ransomware/) Acronis Threat Research Unit (TRU) analyzed recent samples of Akira and Lynx ransomware families to see the latest changes and tweaks implemented by the groups. 24 July 2025 ### [MSP cybersecurity news digest, July 14, 2025](https://www.acronis.com/en/tru/posts/msp-cybersecurity-news-digest-july-14-2025/) SafePay inflicts major ransomware attack on Ingram Micro, Oyster malware loader spread through SEO poisoning campaign to target 8,500+ SMB users, and more. Here are the latest threats to MSP security. 23 July 2025 ### [Threat actors go gaming: Electron-based stealers in disguise](https://www.acronis.com/en/tru/posts/threat-actors-go-gaming-electron-based-stealers-in-disguise/) The Acronis Threat Research Unit (TRU) uncovered a new malware campaign involving Leet Stealer, RMC Stealer (a modified version of Leet Stealer) and Sniffer Stealer. [1](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/1/)...[5](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/5/) [6](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/6/) [7](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/7/) [8](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/8/) [9](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/9/)...[27](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/page/27/)