Acronis Blog

Acronis Blog
Malware protection

All stories in Malware protection

March 31, 2025  — 3 min read
Acronis
March 31, 2025  — 3 min read
Acronis Cyber Protect Cloud earns Top Product award again in latest AV-TEST evaluation
In the AV-TEST Institute’s January–February 2025 evaluation, Acronis Cyber Protect Cloud delivered a flawless performance again, demonstrating constant and reassuring results.
January 05, 2023  — 9 min read
Acronis
January 05, 2023  — 9 min read
Royal ransomware’s actors make high demands
Royal ransomware was first spotted in January 2022, targeting different corporations. This group does not provide ransomware-as-a-service. The attackers demand figures ranging from $250,000 to over $2 million from their victims.
December 27, 2022  — 2 min read
Acronis
December 27, 2022  — 2 min read
AV-Comparatives: Acronis Cyber Protect certified an Advanced Threat Prevention product for enterprise
Acronis Cyber Protect with the Advanced Security pack successfully passed the rigorous test criteria established by AV-Comparatives for their Advanced Threat Protection test, and was certified as an advanced threat prevention solution recommended for use by any business, including enterprise-level companies.
December 18, 2022  — 9 min read
Acronis
December 18, 2022  — 9 min read
Cyber Security, MSPs, and You: Finding The Right MSP Security Vendor
Navigate the world of MSPs with our guide to choosing the right cybersecurity vendor for robust digital protection. Explore key insights and safeguard your data effectively in today's digital landscape.
December 09, 2022  — 9 min read
Acronis
December 09, 2022  — 9 min read
KmsdBot: DDoS and cryptomining combined
On November 10, 2022, the Akamai Security Intelligence Response Team published an article with the description of the newly spotted KmsdBot, which infected their honeypot. Gaming company FiveM, which provides software for GTA V for hosting custom private servers (and happens to be Akamai’s client), became the first victim. During their investigation, researchers found many samples that were built for different architectures.
November 28, 2022  — 9 min read
Acronis
November 28, 2022  — 9 min read
AXLocker ransomware doesn’t change files’ extensions
AXLocker is a ransomware that was found by malware researcher ‘S!ri,’ who posted it on Twitter. Later, it was discovered that AXLocker does not only encrypt files but also steals victims’ Discord credentials and uploads them to its own Discord server. Specifically, the AXLocker ransomware steals tokens stored on a local computer when the user logs in to Discord. It’s not packed or obfuscated.
November 25, 2022  — 8 min read
Acronis
November 25, 2022  — 8 min read
Killnet ransomware — a wiper from the Chaos family
Killnet is a Russian hacker group, previously known for providing DDoS services. At the end of October 2022, the security channel PCrisk discovered the first sample of Killnet ransomware. The group, via a Telegram channel, also announced a ransomware attack on an Italian chemical factory.
October 13, 2022  — 3 min read
Acronis
October 13, 2022  — 3 min read
AV-Comparatives: Acronis Cyber Protect Cloud earns 100% detection rate, zero false-positives
We’re proud to share that Acronis Cyber Protect Cloud with Advanced Security received excellent results in the latest AV-Comparatives Business Security Test, published on October 13, 2022.
September 22, 2022  — 9 min read
Acronis
September 22, 2022  — 9 min read
RapperBot: A new threat for IoT devices
On June 22, 2022, CNCERT IoT Threat Research Team and NSFOCUS FuYingLab monitored a new botnet that was attacking IoT devices. Naming the threat ‘RapperBot,’ researchers found more than 5,000 compromised hosts, but no attack commands were spotted. In analyzing samples, cybersecurity analytics found similarities with Mirai Bot, whose source code has been leaked.
August 25, 2022  — 9 min read
Acronis
August 25, 2022  — 9 min read
SideWinder uses weaponized Word documents to compromise victims’ machines
The SideWinder APT group was first discovered in 2018, and since earlier this year has been actively targeting military, defense and other industries in South Asia. They used to spread phishing emails with Word files that downloaded additional files to decode, drop and start the malware, which collects and uploads victims’ data to remote servers. They've since infected Android devices with malicious apps in Google Play.
August 16, 2022  — 11 min read
Acronis
August 16, 2022  — 11 min read
Hydrox: A new wiper attacks
Hydrox was first spotted by Twitter user Petrovich on July 29, 2022. On August 3, EnigmaSoft described this threat as a harmful malware that actually wipes users' data. This conclusion was made from a “ransom note” which didn’t actually contain any credentials or links for paying the ransom.
August 10, 2022  — 3 min read
Acronis
August 10, 2022  — 3 min read
Acronis Cyber Protect stopped all the threats in the Advanced Protection Test commissioned by AV-Test.org
In their Advanced Protection tests, the famous German testing institute, AV-Test.org, wanted to accent how various products deal with ransomware in reality, and at what stage and how threats are actually detected and stopped. The test was commissioned in February 2022, but the results were published in June.
August 10, 2022  — 4 min read
Acronis
August 10, 2022  — 4 min read
Acronis earns accolades for its security in independent assessments
With the summer of 2022 in full swing, we can look back at a past year of significant growth, community-building and recognition from independent analysts — all of which speak to the importance of the cyber protection approach in the face of modern IT challenges and cyberthreats.