Acronis Blog
Authors
Eric Swotinsky
Eric Swotinsky

Latest stories from Eric Swotinsky

22 August 2022  — 2 min read
TRU Security
Acronis
22 August 2022  — 2 min read
U.K. water supplier disrupted in Cl0p ransomware attack
South Staffordshire Water, a British company that supplies clean water to 1.6 million consumers, has confirmed that they were disrupted by a cyberattack. Fortunately, the attack only affected office IT systems and did not impact the water distribution systems, so the water supply is safe.
22 August 2022  — 2 min read
TRU Security
Acronis
22 August 2022  — 2 min read
RansomHouse breaches eight Italian municipalities, publishes 2.1 TB of data
Cybercrime group RansomHouse claims to have compromised eight Italian districts. The group has published 2.1 TB of exfiltrated data from the IT infrastructures of the union of Tuscan municipalities, in the metropolitan city of Florence.
22 August 2022  — 2 min read
TRU Security
Acronis
22 August 2022  — 2 min read
Argentinian judiciary's services disrupted by PLAY ransomware
Argentina's Judiciary of Córdoba has shut down its IT systems and online portal after suffering a ransomware attack, claimed by the new 'PLAY' ransomware operation. The Judiciary confirmed that it has engaged with Microsoft, Cisco and other local specialists to investigate the attack.
15 August 2022  — 2 min read
TRU Security
Acronis
15 August 2022  — 2 min read
Cisco breached in Yanluowang ransomware attack, 2.8 GB data stolen
Multi-national tech conglomerate Cisco has confirmed that the Yanluowang ransomware gang breached its corporate network in late May, and that the group tried to extort them by threatening to leak stolen files online. The Yanluowang gang claims to have stolen 2.8 GB of data, consisting of approximately 3,100 files which Cisco has described as "not sensitive."
15 August 2022  — 2 min read
TRU Security
Acronis
15 August 2022  — 2 min read
U.K.'s National Health Service suffers outage after cyberattack
The United Kingdom's National Health Service (NHS) 111 emergency services are affected by a significant and ongoing outage. It was triggered by a cyberattack that hit the systems of Advanced, a British managed services provider (MSP).
08 August 2022  — 1 min read
TRU Security
Acronis
08 August 2022  — 1 min read
Electronics manufacturer Semikron hit by LV ransomware
German electronics manufacturer Semikron has reported that they were hit by a ransomware attack. The LV ransomware group has claimed responsibility for this attack, and is threatening to leak 2 TB worth of stolen data if their ransom demands are not met.
05 August 2022  — 2 min read
TRU Security
Acronis
05 August 2022  — 2 min read
European pipeline operator hit by BlackCat/ALPHV ransomware
The ALPHV/BlackCat ransomware gang claims to have stolen more than 150 GB of data from Creos Luxembourg S.A., a company which manages natural gas pipelines and electrical networks in the Grand Duchy of Luxembourg. The alleged stolen data consists of 180,000 files, including contracts, agreements, passports, bills and emails.
05 August 2022  — 2 min read
TRU Security
Acronis
05 August 2022  — 2 min read
New attack framework Manjusaka is similar to Cobalt Strike
Researchers have observed a new post-exploitation attack framework in the wild. Manjusaka, as it's called, can be deployed as an alternative to the popular Cobalt Strike toolset ⁠— or parallel to it for redundancy.
30 July 2022  — 2 min read
TRU Security
Acronis
30 July 2022  — 2 min read
Report: Attackers scan for vulnerabilities within 15 minutes of CVE disclosure
A new report from Palo Alto's Unit 42 found it only takes 15 minutes after the publication of a new CVE for the first cybercriminals to begin scanning potentially vulnerable targets. Within a few hours, the first active exploitation attempts have already started.
29 July 2022  — 2 min read
TRU Security
Acronis
29 July 2022  — 2 min read
QBot malware uses Windows Calculator to side-load attacks
Security researchers have discovered that QBot malware is now using the legitimate Windows Calculator app for DLL side-loading attacks. The method continues to be used in current malspam campaigns.
29 July 2022  — 2 min read
TRU Security
Acronis
29 July 2022  — 2 min read
LockBit ransomware hits numerous victims, including two townships
The Canadian town of St. Marys, Ontario, has been hit by a ransomware attack that locked staff out of internal systems and encrypted data. The small town of around 7,500 residents appears to be the second such target to be attacked by LockBit in just over a week.
27 July 2022  — 2 min read
TRU Security
Acronis
27 July 2022  — 2 min read
Version 4.2 of malicious shortcut generator MLNK Builder emerges on dark web
A new version of MLNK Builder, a link generation tool popular among cybercriminals, has emerged on the dark web. The updated feature set focuses on antivirus evasion and masquerading techniques, using icons of popular legitimate applications and file formats.