TRU Security

Updates from Acronis Threat Research Unit

Acronis
Fake adult websites pop realistic Windows Update screen to deliver stealers via ClickFix
Acronis TRU researchers have discovered an ongoing campaign that leverages a novel combination of screen hijacking techniques with ClickFix, displaying a realistic, full-screen Windows Update of “Critical Windows Security Updates” to trick victims into executing malicious commands.
Insights
November 18, 2025 — 3 min read
Acronis
Acronis Cyberthreats Update, November 2025
The Acronis Cyberthreats Update covers current cyberthreat activity and trends, as observed by Acronis...
November 10, 2025 — 22 min read
Acronis TRU Alliance {VirusTotal}: Tracking FileFix, Shadow Vector, and SideWinder
Introducing the Acronis TRU Alliance Series. This new series highlights collaborative research...
November 07, 2025 — 2 min read
MSP cybersecurity news digest, November 3, 2025
Qilin ransomware abuses Windows Subsystem for Linux to deploy Linux encryptors on Windows, Atroposia...
November 04, 2025 — 4 min read
MSP cybersecurity news digest, October 21, 2025
Here is the MSP cybersecurity news digest for October 21, 2025 from the Acronis Threat Research Unit...
October 28, 2025 — 3 min read
MSP cybersecurity news digest, October 28, 2025
Urgent WSUS RCE flaw actively exploited! Plus: Fake LastPass inheritance emails steal vaults, Iran's...
October 17, 2025 — 3 min read
Acronis Cyberthreats Update, October 2025
The Acronis Cyberthreats Update covers current cyberthreat activity and trends, as observed by Acronis...
September 29, 2025 — 5 min read
MSP cybersecurity news digest, September 29, 2025
Here is the Acronis Threat Research Unit (TRU) MSP cybersecurity news digest, September 29, 2025
September 23, 2025 — 6 min read
MSP cybersecurity news digest, September 23, 2025
Here is the weekly digest with news from Acronis TRU for the week of September 23, 2025
September 11, 2025 — 3 min read
Acronis Cyberthreats Update, September 2025
The Acronis Cyberthreats Update covers current cyberthreat activity and trends, as observed by Acronis...

Trends and analysis

June 28, 2022 — 7 min read
Acronis
Important details About BlackCat: The new version of the...
On March 16, 2022, security specialists identified a new version of BlackCat ransomware (so named...
April 22, 2022 — 14 min read
Acronis
HermeticWiper and HermeticRansom delivered via Active...
On February 23, 2022, a new data wiper and ransomware were deployed on a large number of devices in...
March 16, 2022 — 9 min read
Acronis
WhisperGate malware targets Ukrainian government sites
Multiple government sites in Ukraine were shut down on January 13, 2022, the result of a large-scale...
December 13, 2021 — 4 min read
Acronis
Critical Apache Log4j vulnerability discovered — here's...
Late last week, a critical zero-day vulnerability in the popular Java logging library Log4j surfaced...
November 30, 2021 — 9 min read
Acronis
VenomRAT: A remote access tool with dangerous consequences
The first messages about VenomRAT started to appear in June 2020. By analyzing the code, analysts...
November 26, 2021 — 14 min read
Acronis
Trojan-as-a-service: From Formbook to XLoader
Discovered in 2016, Formbook appeared on underground forums, advertised as an infostealer for Windows....