INC Ransom
Threat Actor
INC Ransom came about in August this year and targeted organizations spanning various sectors such as healthcare, education, and government in double extortion attacks.After gaining access, they move laterally through the network, first harvesting and downloading sensitive files for ransom leverage and then deploying ransomware payloads to encrypt compromised systems.
Incidents Associated with this Threat
- November 14, 2024: Hungarian Defense Procurement Agency sees Sensitive Information Published
- June 27, 2024: Cyberattack at Cambridge University Press & Assessment (CUPA)
- March 7, 2024: Prolonged effects of Cyberattack on City of Leicester almost Two Months after Initial Attack
- October 25, 2023: Ransomware Attack at Yamaha Subsidiary
Malware Used by this Threat Actor
No malware identified for this threat actor.