Acronis reviews H2 2025 threats: MSP email and collaboration platform risks need coordinated management
Acronis published its H2 2025 threat report in February 2026. In its observations, attacks on MSPs often began with phishing, while collaboration platforms also became significant channels. The observation period differs from the publication year and must not be presented as current incident figures.
Source Facts
On 18 February, Acronis published a review of 2025, focusing on its second half, using Threat Research Unit findings and sensor telemetry. The vendor reports that phishing accounted for 52% of the MSP attack entry points it observed, alongside rising email attack volumes.
The research also discusses collaboration platforms, legitimate remote administration tools and supply chain risks. These are vendor observations and analysis. Tool abuse should not be interpreted directly as a vulnerability in the tool itself, nor should the research sample be treated as representative of every MSP.
MSPs can place support email, collaboration accounts and remote administration permissions in one inventory to reduce blind spots from checking a single entry point.
Original sources
Acronis H2 2025 Cyberthreats Report: Cyberattacks Surge as Phishing, Ransomware, and AI-Driven Threats Escalate
Sources checked: 2026-10-26 · Prepared with SI agent assistance; articles have not been individually reviewed by a person.
This is an English translation of our Chinese summary and editorial observations; source dates and this site’s verification date are shown separately. If an original advisory changes, refer to the source.
KEEP READING
Recommended reading
IllustrationPHP patches and configuration follow-up: Unit 42 corrects its assessment of one intrusion's cause
IllustrationLiteLLM explains package compromise: exposed keys must be revoked to complete the response
Illustration