Browse all articles

Acronis Threat Research Unit (TRU) has identified an active Lampion malware campaign targeting Portuguese users through phishing emails masquerading as financial and administrative communications.

The Acronis Cyberthreats Update covers current cyberthreat activity and trends, as observed by Acronis Threat Research Unit (TRU) and Acronis sensors. Figures presented here were gathered in June 2026 and reflect threats that Acronis detected, as well as news stories from the public domain. This report represents a global outlook and is based on more than one million unique endpoints distributed around the world.

Selective session recording is one of the oldest and cheapest controls in privileged-access security, and every regulatory framework that touches remote administration expects it. The control became generally available on the Acronis platform on April 22, 2026. This report measures the two months of adoption that followed, through June 23, 2026.

The single most useful security control inside a cloud-protection platform is also the one that costs nothing to turn on: give each technician the narrowest role that fits the job. Role-based access control is not a user-experience nicety. It is the operational expression of three of the oldest and most universally agreed cybersecurity principles: least privilege, separation of duties and accountability.

Acronis Threat Research Unit (TRU) has been tracking two concurrent campaigns orchestrated by Mustang Panda targeting Indian government entities, delivering new malware implants and abusing Zoho WorkDrive, a legitimate cloud storage platform commonly used in the Indian government sector.

INC has evolved from an emerging ransomware-as-a-service (RaaS) operation into one of the most active ransomware groups in 2026, claiming more than 800 victims since 2023.

The Acronis Cyberthreats Update covers current cyberthreat activity and trends, as observed by Acronis Threat Research Unit (TRU) and Acronis sensors. Figures presented here were gathered in May 2026 and reflect threats that Acronis detected, as well as news stories from the public domain.