Ransomware
INC Ransom
First seen: 2023-07 • Status: active
Currently Active Threat
INC Ransom is a newer ransomware group that operates like a business. They target companies through phishing and software vulnerabilities.
Overview
INC Ransom is an emerging ransomware group that uses spear-phishing and CVE exploitation. They maintain a professional operation with a leak site.
Also Known As
INC
How It Spreads
- • Spear-phishing
- • CVE exploitation
- • Citrix vulnerabilities
What It Does
- • File encryption
- • Data theft
- • Professional extortion
Is your business exposed?
Target Platforms
Windows
Detection Tips
- • Monitor for spear-phishing
- • Watch for INC indicators
MITRE ATT&CK Techniques
T1486, T1566, T1190
If You're Infected
- 1.
Patch Citrix devices
- 2.
Enhance email security
Is your business exposed?
Check if your company data is circulating on the dark web
Free scan • No credit card required