Acronis Cyberthreats Update, May 2025
The Acronis Cyberthreats Update covers current cyberthreat activity and trends, as observed by Acronis Threat Research Unit (TRU) and sensors.













Threat Research Unit is a dedicated Acronis unit composed of experienced cybersecurity experts. Our team includes cross-functional experts in cybersecurity, AI, and threat intelligence. We are empowering IT teams with intelligence-driven cyberthreat research and reporting.
The Acronis Cyberthreats Update covers current cyberthreat activity and trends, as observed by Acronis Threat Research Unit (TRU) and sensors.
Three known exploited vulnerabilities added to catalog by CISA, North Korean Kimsuky group breaches South Korean and Japanese systems with BlueKeep vulnerability, and more. Here are the latest threats to MSP security.
Cyberattack hits South Africa’s fourth-largest telecom network Cell C, worldwide pharma and health care orgs attacked by new ResolverRAT malware, and more. Here are the latest threats to MSP security.
Microsoft Patch Tuesday for April 2025 addresses 134 vulnerabilities, Precision-validated phishing now being used by threat actors to steal victims’ credentials, and more. Here are the latest threats to MSP security.
Astaroth, also known as Guildma, is a sophisticated piece of malware that first emerged in 2018 and has since undergone significant evolution, adapting to new security measures and refining its attack methodologies.
Data breach hits the State Bar of Texas; INC ransomware gang claims responsibility, Updated version of Hijack Loader uses call stack spoofing to deliver infostealer malware, and more. Here are the latest threats to MSP security.
The Acronis Cyberthreats Update covers current cyberthreat activity and trends, as observed by the Acronis Threat Research Unit.
RedCurl hacking group deploys QWCrypt malware in its initial ransomware campaign, RansomHub’s security evasion tool, EDRKillShifter, exploits vulnerabilities to disable EDR software, and more. Here are the latest threats to MSP security.
Supply chain attack compromises 100 car dealerships through a malicious “ClickFix” code, Cl0p ransomware group uses Cleo file transfer tool to breach data of Western Alliance Bank, and more. Here are the latest threats to MSP security.
Japanese telecom corporation NTT Communications has nearly 18,000 customers’ data breached, 900 victims claimed by “Desert Dexter” via modified version of AsyncRat malware, and more. These are the latest threats to MSP security.
IT supply chains targeted by Chinese cyber-espionage group Silk Typhoon, U.A.E. aviation sector suspected to have been attacked by Iranian-aligned threat actor, and more. Here are the latest threats to MSP security.
Cracked software being used to distribute Lumma and ACR Stealer in new malware campaign, EU health care organizations targeted by new NailaoLocker ransomware, and more. Here are the latest threats to MSP security.