--- title: Browse all articles description: Get the latest cybersecurity updates and threat intelligence from Acronis Research Unit. Learn about the latest emerging cyberthreats and protection strategies. canonical_url: https://www.acronis.com/en/tru/posts/page/49/ locale: en last_updated: 2026-10-27 --- * [Home](https://www.acronis.com/en/tru/) * Articles # Browse all articles Categories:[MSP News Digest](https://www.acronis.com/en/tru/categories/news/) [Cyberthreats Update](https://www.acronis.com/en/tru/categories/cyberthreats-update/) [Security Research](https://www.acronis.com/en/tru/categories/security-research/) [SMB Insights](https://www.acronis.com/en/tru/categories/smb-insights/) Search Filter articles by Year Select Month Select Author Select Cybersecurity Ransomware protection Malware protection Cyberthreats MSP cybersecurity Threat detection Phishing Email security [![Image 1: Nefilim ransomware uses Citrix vulnerability to compromise victims’ machines](https://staticfiles.acronis.com/images/content/1c8998cb0c38f7b2b9cbf9115cf37f27.png)](https://www.acronis.com/en/tru/posts/nefilim-ransomware-uses-citrix-vulnerability-to-compromise-victims-machines/) 20 September 2020 [Nefilim ransomware uses Citrix vulnerability to compromise victims’ machines](https://www.acronis.com/en/tru/posts/nefilim-ransomware-uses-citrix-vulnerability-to-compromise-victims-machines/) The Nefilim ransomware group, known to be active since February 2020, adopts the Nemty ransomware code written in the Delphi programming language. It uses a Citrix vulnerability/RDP to access corporate networks. Nefilim started its own data leak site called ‘Corporate Leaks,’ where the operators publish exfiltrated data from compromised organizations if they refuse to pay. Author: **[Acronis Threat Research Unit](https://www.acronis.com/tru/authors/acronis-threat-research-unit)** [![Image 2: SunCrypt adopts attacking techniques from NetWalker and Maze ransomware](https://staticfiles.acronis.com/images/content/af8175558c043f9dda548ff27a0c15bc.png)](https://www.acronis.com/en/tru/posts/suncrypt-adopts-attacking-techniques-netwalker-and-maze-ransomware/) 16 September 2020 [SunCrypt adopts attacking techniques from NetWalker and Maze ransomware](https://www.acronis.com/en/tru/posts/suncrypt-adopts-attacking-techniques-netwalker-and-maze-ransomware/) The SunCrypt ransomware family was first spotted in October 2019, but it was not very active at that time. The group behind it was independent in the beginning, but they recently joined the so-called Maze cartel – combining forces to rob individuals and companies around the world. This cartel included Maze and LockBit when it first started, but later welcomed Ragnar Locker and now SunCrypt. Author: **[Acronis Threat Research Unit](https://www.acronis.com/tru/authors/acronis-threat-research-unit)** [![Image 3: NetWalker leverages obfuscated PowerShell to start C# injector](https://staticfiles.acronis.com/images/content/fe418274fdb9a3f2211b804079ec2960.png)](https://www.acronis.com/en/tru/posts/netwalker-leverages-obfuscated-powershell-to-start-c-injector1/) 21 August 2020 [NetWalker leverages obfuscated PowerShell to start C# injector](https://www.acronis.com/en/tru/posts/netwalker-leverages-obfuscated-powershell-to-start-c-injector1/) NetWalker ransomware was discovered in August 2019 in the wild. It implements a ransomware-as-a-service model, targeting both organizations and individual users. Since March 2020, the operators have managed to extort approximately $25 million. Author: **[Acronis Threat Research Unit](https://www.acronis.com/tru/authors/acronis-threat-research-unit)** [1](https://www.acronis.com/en/tru/posts/page/1/)...[43](https://www.acronis.com/en/tru/posts/page/43/) [44](https://www.acronis.com/en/tru/posts/page/44/) [45](https://www.acronis.com/en/tru/posts/page/45/) [46](https://www.acronis.com/en/tru/posts/page/46/) [47](https://www.acronis.com/en/tru/posts/page/47/) [48](https://www.acronis.com/en/tru/posts/page/48/) [49](https://www.acronis.com/en/tru/posts/page/49/)