Threat actor · G1032

INC Ransom

GOLD IONIC

UnattributedNo public state or group attribution on record

INC Ransom is a ransomware and data extortion threat group associated with the deployment of INC Ransomware that has been active since at least July 2023. INC Ransom has targeted organizations worldwide most commonly in the industrial, healthcare, and education sectors in the US and Europe.

MITRE ATT&CK Techniques

T1021.001 T1036.005 T1046 T1047 T1049 T1059.003 T1069.002 T1070.004 T1071 T1074 T1078 T1087.002 T1105 T1135 T1190 T1219 T1486 T1537 T1560.001 T1566 T1569.002 T1570 T1588.002 T1657 T1685

Associated Malware

AdFindINC RansomwareNetNltestPsExecRcloneToresentutl

Full MITRE ATT&CK profile

0 recent articles mention this actor

No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.