Tag

#acronis

8 stories taggedacronis.

A map showing Taiwan and six other countries highlighted, with a network diagram overlaid displaying Gitea repository servers and scanning patterns radiating ou
Threat Intelligence

China-Linked Red Heron Turns Gitea Flaw Into a Seven-Country Break-In Spree

Acronis researchers say the group scanned nearly 1,400 self-hosted code servers and singled out 477 systems in Taiwan.

3 min read
A server room with multiple dark tower units and blinking status lights, with one unit's access panel slightly ajar revealing the internal circuitry, suggesting
Vulnerabilities

Acronis backup add-on carries a Linux privilege flaw, and someone is already using it

A high-severity bug in Acronis backup plugins for cPanel, WHM and Plesk is being exploited in what the vendor calls limited, targeted attacks. Patches are out.

3 min read
An MSP's operations center displaying backup systems, antivirus consoles, and ransomware detection tools all monitored simultaneously with a checklist overlay v
Ransomware

Six things MSPs should actually test before the next ransomware hit

Acronis lays out a practical checklist for managed service providers, moving the conversation past backups and antivirus to the full arc of prevention, detection and recovery.

4 min read
A computer screen displaying official-looking Cambodian government and health department documents mixed with property listings, all containing malicious file a
Threat Intelligence

Spark RAT campaign hits Cambodia, using fake government and health notices as bait

Attackers are dropping Spark RAT on Cambodian targets through documents dressed as official government notices, health bulletins and property listings, while using a legitimate security driver to blind the victim's defences.

3 min read
A Mexican bank's branding and interface visible on a compromised computer screen, with a file manager window open showing suspicious executable files disguised
Threat Intelligence

Grandoreiro Banking Malware Is Back, Targeting Mexican Bank Customers

A banking Trojan first spotted in 2016 is still active, still stealing money, and now using a trusted file-management tool as cover to slip past security software on computers in Mexico.

4 min read
A smartphone displaying a software installation dialog box for a telecom application, with network infrastructure silhouettes visible through a window behind it
Threat Intelligence

PATCHCORD: The Fake VPN Installer Hitting Afghan Phone Networks and Indian Infrastructure

A new backdoor is being smuggled onto computers through fake Afghan Telecom software, and researchers say critical services in South Asia are in the crosshairs.

3 min read
Portuguese bank statements and account records showing gradual unauthorized transfers, a computer screen displaying the same banking malware code that has remai
Threat Intelligence

A Six-Year-Old Brazilian Bank Fraud Tool Is Still Emptying Portuguese Accounts

Lampion has barely changed since 2019. It doesn't need to. Portugal keeps falling for it.

4 min read
Illustration: a modern corporate server room bathed in cool blue light
AI Security

When your AI helper has admin rights: the new ransomware fast lane

Enterprise AI assistants with over-broad permissions can turn a routine break-in into a company-wide ransomware event in minutes, Acronis warns.

4 min read
© 2026 Threat Vectr