Ransomware Group
Lynx
Also known as: INC Ransom rebrand
Status: active • First seen 2024-07 • 40+ known victims
Lynx is a renamed version of the INC Ransom gang. They changed their name but kept attacking factories and power companies with the same techniques.
Overview
Lynx appears to be a rebrand of INC Ransom, continuing operations with updated branding. The group targets manufacturing and energy sectors.
Target Industries
Manufacturing, Energy, Retail, Healthcare
How They Attack
- • Spear phishing
- • Double extortion
- • Critical infrastructure targeting
- • Data theft
Notable Victims
Energy companies (2024), Manufacturing firms
Is your business exposed?
How to Protect Against Lynx
- 1.
Monitor for INC Ransom indicators
- 2.
Implement energy sector security controls
- 3.
Segment OT from IT networks
MITRE ATT&CK Techniques
Related Groups
Is your business exposed?
Check if your company data is circulating on the dark web
Free scan • No credit card required