GroupProfiles: INC_Ransom.md
Recurso del BushidoUK Ransomware Tool Matrix - GroupProfiles.
INC Ransom's Tools
| Discovery | RMM Tools | Defense Evasion | Credential Theft | OffSec | Networking | LOLBAS | Exfiltration |
|---|---|---|---|---|---|---|---|
| AdFind | | | | | | Finger | BackBlaze |
| Advanced IP Scanner | | | | | | PsExec | MEGA |
| | | | | | | | Restic |
| | | | | | | | RClone |
| | | | | | | | s5cmd |
> [!NOTE]
> This is the list of tools that have been observed during various intrusions that lead to INC Ransom ransomware deployment.
#### Sources
| Date Published | Report |
|---|---|
| 12 March 2026 | https://www.huntress.com/blog/data-exfiltration-threat-actor-infrastructure-exposed |
| 14 August 2024 | https://www.guidepointsecurity.com/blog/update-from-the-ransomware-trenches/ |
| 1 May 2024 | https://www.huntress.com/blog/lolbin-to-inc-ransomware |
| 15 April 2024 | https://www.secureworks.com/blog/gold-ionic-deploys-inc-ransomware |
| 11 August 2023 | https://www.huntress.com/blog/investigating-new-inc-ransom-group-activity |