INC Ransom is a financially motivated ransomware-as-a-service (RaaS) operation that emerged in July 2023. The group functions by providing ransomware malware and infrastructure to affiliates, who then conduct intrusions and share ransom proceeds. While definitive attribution remains uncertain, their communications and tactics are consistent with Eastern European ransomware operations, and some researchers believe Russian criminals are involved. A distinguishing characteristic of INC Ransom is its cross-platform capability, enabling it to target Windows systems, Linux servers, and VMware ESXi virtualization environments. The group employs double extortion, not only encrypting data but also threatening to leak sensitive information on its public leak blog. They are also known for cynically framing their extortion as a "service" to help victims improve their security. The group is closely related to Lynx ransomware, with Lynx often considered a successor or variant that emerged after INC'

Aliases del actor

GOLD IONIC"Inc

Actores similares

incransomransomware · 832inc-ransomactor · 26arvinclubransomware · 2braincipheractor · 24BrainCipheractor · 2brave-princeactor · 1Inceptionapt · 1inception-frameworkactor · 1prince-of-persiaactor · 1pinchy-spideractor · 1