--- title: "Acronis warns against Snake/EKANS ransomware targeting industrial control systems — ZEBR.ai" description: "Acronis, a global leader in cyber protection, warns of an attack by Snake ransomware, also known as EKANS (“Snake” spelled backwards). This ransomware is notable for targeting industrial control systems (ICS), not individual machines but entire networks. The ransomware, which…" url: "https://zebr.ai/en/blog/acronis-warns-against-snake-ekans-ransomware-targeting-industrial-control-systems" markdown_url: "https://zebr.ai/en/blog/acronis-warns-against-snake-ekans-ransomware-targeting-industrial-control-systems.md" language: "en" published: "2020-02-24T07:42:51+00:00" alternates: cs: "https://zebr.ai/cs/blog/acronis-varuje-pred-ransomwarem-snake-ekans-ktery-utoci-na-prumyslove-ridici-systemy.md" sl: "https://zebr.ai/sl/blog/acronis-opozarja-pred-izsiljevalsko-programsko-opremo-snake-ekans-ki-napada-industrijske-nadzorne-sisteme.md" sk: "https://zebr.ai/sk/blog/acronis-varuje-pred-ransomverom-snake-ekans-ktory-utoci-na-priemyselne-riadiace-systemy.md" hr: "https://zebr.ai/hr/blog/acronis-upozorava-na-ransomware-snake-ekans-koji-napada-industrijske-upravljacke-sustave.md" sr-Latn: "https://zebr.ai/sr-latn/blog/acronis-upozorava-na-ransomware-snake-ekans-koji-napada-industrijske-kontrolne-sisteme.md" bs: "https://zebr.ai/bs/blog/acronis-upozorava-na-ransomware-snake-ekans-koji-napada-industrijske-upravljacke-sisteme.md" sq: "https://zebr.ai/sq/blog/acronis-paralajmeron-per-ransomware-in-snake-ekans-i-cili-sulmon-sistemet-e-kontrollit-industrial.md" fr: "https://zebr.ai/fr/blog/acronis-met-en-garde-contre-le-ransomware-snake-ekans-qui-attaque-les-systemes-de-controle-industriels.md" es: "https://zebr.ai/es/blog/acronis-advierte-sobre-el-ransomware-snake-ekans-que-ataca-los-sistemas-de-control-industrial.md" de: "https://zebr.ai/de/blog/acronis-warnt-vor-der-ransomware-snake-ekans-die-industrielle-steuerungssysteme-angreift.md" pt-BR: "https://zebr.ai/pt-br/blog/acronis-alerta-sobre-o-ransomware-snake-ekans-que-ataca-sistemas-de-controle-industrial.md" pl: "https://zebr.ai/pl/blog/acronis-ostrzega-przed-ransomware-snake-ekans-ktory-atakuje-przemyslowe-systemy-sterowania.md" it: "https://zebr.ai/it/blog/acronis-mette-in-guardia-dal-ransomware-snake-ekans-che-attacca-i-sistemi-di-controllo-industriale.md" nl: "https://zebr.ai/nl/blog/acronis-waarschuwt-voor-snake-ekans-ransomware-die-industriele-besturingssystemen-aanvalt.md" hu: "https://zebr.ai/hu/blog/acronis-figyelmeztet-az-ipari-vezerlorendszereket-tamado-snake-ekans-zsarolovirusra.md" ro: "https://zebr.ai/ro/blog/acronis-avertizeaza-impotriva-ransomware-ului-snake-ekans-care-ataca-sistemele-de-control-industrial.md" tr: "https://zebr.ai/tr/blog/acronis-endustriyel-kontrol-sistemlerine-saldiran-snake-ekans-fidye-yazilimina-karsi-uyariyor.md" id: "https://zebr.ai/id/blog/acronis-memperingatkan-tentang-ransomware-snake-ekans-yang-menyerang-sistem-kontrol-industri.md" --- [Home](https://zebr.ai/en/) [Blog](https://zebr.ai/en/blog) Acronis warns against Snake/EKANS ransomware targeting industrial control systems # Acronis warns against Snake/EKANS ransomware targeting industrial control systems [press release](https://zebr.ai/en/blog?tag=press-releases) Acronis, a global leader in cyber protection, warns of an attack by Snake ransomware, also known as EKANS (“Snake” spelled backwards). This ransomware is notable for targeting industrial control systems (ICS), not individual machines but entire networks. The ransomware, which… 24/02/2020 · 2 min read · ZEBR.ai editorial team **Acronis**, a global leader in cyber protection, warns of an attack by **Snake ransomware**, also known as EKANS (“Snake” spelled backwards). This ransomware is notable for targeting **industrial control systems (ICS)**, not individual machines but entire networks. The ransomware, which first appeared in December last year, stops specific processes related to ICS operations and deletes Windows backups. Snake enters systems through insecure RDP configurations and is distributed using spam emails and infected attachments. It can also enter a system through botnets, exploits, malicious ads, compromised websites, fake updates, or infected installation files. No decryption tool is currently available; however, [systems can be protected](https://www.acronis.com/en-us/blog/posts/snakeekans-ransomware-attacks-industrial-control-systems-acronis-stops-it) by the **Acronis Active Protection** feature. It is integrated into all Acronis solutions, typically the [Acronis Cyber Backup](https://www.zebra.cz/produkt/acronis-backup/) solution for enterprise backup and cyber protection. Acronis Active Protection can detect this ransomware, stop encryption in real time, and subsequently restore damaged files to their original state. “Industrial enterprises are among the most vulnerable sectors. Attackers count on the fact that every day of halted production represents enormous financial losses, and companies will ultimately pay the ransom under pressure,” said **Zdeněk Bínek, responsible for sales of Acronis solutions in the Czech Republic and Slovakia**. “Companies today essentially have three options: pay the ransom, make every effort to restore their systems without paying, or proactively acquire a solution that protects them from the first two situations. It is not difficult to guess that prevention is the least costly of all three options—both in time and money.” Many industrial companies around the world have faced ransomware attacks in recent times, including manufacturers Nissan, Renault, Norsk Hydro, TSMC, and ASCO. In the Czech Republic, [OKD](https://ct24.ceskatelevize.cz/regiony/3012650-doly-na-karvinsku-zustavaji-prazdne-preruseni-tezby-kvuli-ochromenym-pocitacum) also experienced an attack on its infrastructure at the end of last year and had to suspend mining operations for 4 days as a result of the incident. Source: Article author: ZEBR.ai editorial team Read on ## More related articles [All articles](https://zebr.ai/en/blog) Contact ## Do you need a solution for yourself or for your client? Tell us which service you are looking into, and a specialist in that area will get back to you directly. [(704) 745-4214](tel:+17047454214)\ --- - Source: - Site overview for AI agents: