TRU Security

Updates from Acronis Threat Research Unit

Acronis
Trojanized ScreenConnect installers evolve, dropping multiple RATs on a single machine
Over the past months, Acronis TRU (Threat Research Unit) has identified multiple active and ongoing campaigns leveraging trojanized versions of ConnectWise ScreenConnect to gain initial access to victim networks and compromise target machines.
Insights
August 21, 2025 — 5 min read
Acronis
MSP cybersecurity news digest, August 13, 2025
Clinical data stolen in cyberattack on dialysis provider DaVita, Chanel, Pandora, Google and Cisco...
August 18, 2025 — 4 min read
MSP cybersecurity news digest, August 4, 2025
Scattered Spider group disrupted, but imitators carry on, Fake OAuth apps and Tycoon phishing kit used...
August 11, 2025 — 3 min read
Acronis Cyberthreats Update, August 2025
The Acronis Cyberthreats Update covers current cyberthreat activity and trends, as observed by Acronis...
August 05, 2025 — 4 min read
MSP cybersecurity news digest, July 29, 2025
Benign-appearing panda images used by new Koske Linux malware to deliver malicious code, Turkish...
August 04, 2025 — 19 min read
MSPs a top target for Akira and Lynx ransomware
Acronis Threat Research Unit (TRU) analyzed recent samples of Akira and Lynx ransomware families to...
July 24, 2025 — 4 min read
MSP cybersecurity news digest, July 14, 2025
SafePay inflicts major ransomware attack on Ingram Micro, Oyster malware loader spread through SEO...
July 16, 2025 — 4 min read
MSP cybersecurity news digest, July 7, 2025
Zurich nonprofit Radix hit by Sarcoma ramsomware group, resulting in theft of 1.3TB of data, Google...
July 14, 2025 — 3 min read
Acronis Cyberthreats Update, July 2025
The Acronis Cyberthreats Update covers current cyberthreat activity and trends, as observed by Acronis...
June 30, 2025 — 4 min read
MSP cybersecurity news digest, June 30, 2025
ConnectWise ScreenConnect installer exploited by authenticode stuffing technique, attackers breach...

Trends and analysis

April 17, 2021 — 5 min read
Acronis
Cyberthreat update from Acronis CPOCs: Week of April 12,...
Here at Acronis, we’re always monitoring for dangers to your data, deploying updates to handle...
April 09, 2021 — 4 min read
Acronis
Cyberthreat update from Acronis CPOCs: Week of April 5, 2021
Here at Acronis, we’re always monitoring for dangers to your data, deploying updates to handle...
April 02, 2021 — 5 min read
Acronis
Cyberthreat update from Acronis CPOCs: Week of March 29,...
Here at Acronis, we’re always monitoring for dangers to your data, deploying updates to handle...
March 20, 2021 — 5 min read
Acronis
Cyberthreat update from Acronis CPOCs: Week of March 15,...
Here at Acronis, we’re always monitoring for dangers to your data, deploying updates to handle...
March 05, 2021 — 5 min read
Acronis
Cyberthreat update from Acronis CPOCs: Week of March 1, 2021
Here at Acronis, we’re always monitoring for dangers to your data, deploying updates to handle...
March 03, 2021 — 12 min read
Acronis
Cl0p ransomware returns with better self-defense and...
In February 2021, the public was shocked by the news of the hacking of Bombardier, a giant in the...