Latest Research on INC and The Gentlemen Ransomware: Exposed AI Infrastructure
INC Ransom Ransomware Group
Ransomware group profile
Description
INC Ransom is a sophisticated ransomware group active since July 2023, known for their double extortion tactics that involve not only encrypting data but also threatening to leak sensitive information. They target a variety of high-profile sectors, including healthcare and education, leveraging advanced techniques to infiltrate systems and maximize impact.
Key insights
- •Employs double extortion tactics to maximize leverage on victims.
- •Targets critical infrastructure sectors, including healthcare and public administration.
- •Utilizes advanced techniques like spear-phishing and RDP exploitation for initial access.
- •Custom ransomware employs AES-128 encryption with multi-threading to hinder recovery.
- •Effective in evading detection through legitimate process usage and security feature manipulation.
- •Cryptocurrency is the primary payment method for ransom demands.
Threat Level & Status Breakdown
For INC Ransom · Based on incidents in selected period
Recent activity
Monthly attack count for INC Ransom in the selected period
Intelligence
IOCs, YARA/Sigma rules, and related families for INC Ransom
- 01aa278b07b58dc46c84bd0b1b5c8e9ee4e62ea0bf7a695862444af32e87f1fd
- 7e851829ee37bc0cf65a268d1d1baa7a
- fb14aae2ed93a7ddfa718f433f585735
- 7d0c735c8b5bddf577727cdb7d10cb94e2de8d945d2653af6153f9ecb4479384
- fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced
- 1fb412212359a970be06b9a4578c1e68
- 63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7
- f484f919ba6e36ff33e4fb391b8859a94d89c172a465964f99d6113b55ced429
- 543991ca8d1c65113dff039b85ae3f9a87f503daec30f46929fd454bc57e5a91
- 3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab
- 0296e2ce999e67c76352613a718e11516fe1b0efc3ffdb8918fc999dd76a73a5
- 9218e2c37c339527736cdc9d9aad88de728931a3
- 25b9fdef3061c7dfea744830774ca0e289dba7c14be85f0d4695d382763b409b
- 75612233d32768186d0557dd39abbbd3284a2a29
- d0a63e059ed2c921c37c83246cdf4de0c8bc462b7c1d4b4ecd23a24196be7dd7
- 1e074d9dca6ef0edd24afb2d13ca4429def5fc5486cd4170c989ef60efd0bbb0
- e502b8d617a2cd9bfa41762282a0ff81
- 3403b92056d7645acfb7236824cc58b15e4d5395
- 77962a384d251f0aa8e3008a88f206d6cb1f7401c759c4614e3bfe865e3e985c
- 6cd349eda0fa6c8b274a0920852c68f8b727afea1fdbc69ad183cef05d9cf141
- 21ee713585ed802b675b7144f7ebd875573e09809c2dff21e65da3d127fdca71
- 0cb89b37239f94d214c12419addf49e3143ae71e53fe1934fa5776c8eafd9c51
- 48868c98dfabd703031587cffdbe5ca26ac180a15e89a52e59915710f1836f28
- 7f37351979c249417cb180b4ede0ed17e5fe2a1f08add4d72606b589f8fdb245
- 5cc212f84d2bf3fbab165aaf09b16e00fcf2f1ccd880d24b14404c53dcdbf241
- 60aeb9f7bccf377ff02ed64783e66a62c0f976878d9729b067bc7e5b0b9da9d6
- 5fda381a9884f7be2d57b8a290f389578a9d2f63e2ecb98bd773248a7eb99fa2
- 312f34ee8c7b2199a3e78b4a52bd87700cc8f3aa01aa641e5d899501cb720775
- ea9154e374e4f77bc2cf54282e23543573980342a85bc888cb23f20b8bbba081
- 8c470301dcb7278f73e622f1950073567b34011c64b60cdfbb0f89803923a5a3
- 81a9af3846bad3a1107164ff7cf0a08e020b31a3b32fd17866e17d4c1565f7f2
- 1e1e68bbb899450a57274a8b12082ed4e2040a2aae77014f20431689d2b4edee
- c2b0ae0a1f42a139abe4dd612676066ec1426394
- b4ee1f50fbb49f0ff5fde3d026343bc23ee08d51
- 5e5b716f2385c818ec61198be1a2a07a4560eac5
- 04d4a9fbb32e967200eb98be014ca914a03bfa6b
- b6df166291f80ee89032d769c99714f3
- 5f3a55201c511c9ff9be4c16c41028a2
- 5cb00bbfe818ee3e85fb99ab1db1af7c
- 54d21399b8b52b48a0fef68450593e45
- 2ff86a4fdfec4a5b49d5545f9a62ec4c
- 3c92be8d6c8380bb7122a80aa3f9880fa81e64ec
- 28685dff00aa1752b62a8580955b2530d63092bdcc0528b872a668cddad78c11
- 290d41e7436238066a8aacbd63a805aeeefc00d8798116dc702eccf6df3eae37
- cc2c8ac5aea8d7c36e9161d54e4255f3
- 0dc6a5ce14838813e297a83e3c3c0868c7a211ee2da9c9705e5a282e65f089fe
- c7bbc3728ccbc968688e7ea5b9cff8c6f75238b1
- bac340524549410f51b060f21abb7db30c0c5378edd2e3ac15b526e141417e89
- 9cfe9b894af68946ddc7e6f4cbdb085a92c4009ea00554c407beb5a8fc29f6b7
- 8af1afc82c0d578a54cc34d09544a0695ec2b0d5f244bf1f1bb4993ee7614734
- ef431e36a8ac12051af588d800e1d8128d583a9d4c68187709263a13564081cd
- 55a81d88fff3dc3de0e42724b0a992d4ef382b0e1a82187abf9d635ab89b2bae
- e3191e13e6ff9a1a85d1dcffc4e7a8bdcc12329f8ecf0ad825f8670b0d12c97a
- 59d552bb3abeb278f0f9deb5b838bf6e
- 6aeee2fff046a115f1ff8e78c8794ca9
- 2a92762213ccde7bfac2a0a72f1816f2
- 75b5f0e4a17efa8efe6384a9c3d7a667
- e205d76c2f1d1bf356fddf6a6aa22601
- 8021f32be9faef6137ea9d442ebe0059
- 55cf090e07a9ecbff062c47ef93fd1be
- 32d741ce1461d1e310452ef29ec7906326970af07f9139ea9260abb2df6f0ae5
- bee987e441c5b1e49eefed56b04adbee72a6fcb4ddde6bcf4d4abb3bfbc4661c
- 2d3dfec60201dcc8d0b08abefa8d43efe5f62c33110f036560baa6f1bf24ea8a
- a190c6075a60b528ec4185e5d4d81ac4d039e5d357ab33e2384ae21b02e29ad4
- 7bfc7148c9eb8a3bcc6472e56e7d5be901462873d793323c69067d6dbfa2f79a
- e6ce4b7c40d38a246c0dcc88c4f005fe28e3b5a8da603116881f7c5356771c70
- dc36944e733c1c70145681551b32ea95e17770a490e83d61ca525807e6d1fc51
- 8e7027367756ed9cee15529fd39c839f3773e0930fe8207b9a8654625128dd60
- 53983a29efdc724bf6ae68c9e11bb165945571b079a3c85f213c60bdc4bd2af3
- 85b79bbc907b8c0eeacc5da5ac35d7387c69faeb2f7822b3e2dca94f80ed0851
- 3363e3af60b1e25f8cdc70206f1d7b89e28bb72a7dd43f4460f3ee07d7508f80
- ad1b8bdfb562ede7017003679185c07b6f746778ee7ed179c54e3c35bc0c4ccb
- a92641523ad121aaf140234a5ee70940b1fee67f12ea9a67c4ebb8fa9fbdcbeb
- 78f2627f3795ea508fecac16227bbff8
- 5f41cf47e7dbfe9d4290d64877c2db7fc9509fc15ce1e5ccda66cadefcbcb9fe
- ae593146b2cd736b65d71386caa86669577527bd1574b4e4beb9539b566f1190
- c11d57472a70943367581b31d8732b29885470741b8aed1c7692956d9666eb91
- e2b5fc7e457661fb886e8bac99d15b0cba3871fc72950ca4802aa6f0c4494553
- bef87021caf35bf50370c0a11ccf83de14cbc1558380b690a63f87f1bf4cb366
- 8bba473887e6d31f60d13c4fdc903bfbf688f912ad8aa5ea171ae626d3a7b9a4
- d4ae978d0fa31d31144a0289f2307393deb992a54e4e7335e923511ac6bbc47e
- 27d39120cdc08ce2ae074abcdde208d533aa8f3f6569c0c182600f3abfd96851
- 7114be5cb487e2975d2167a8660f164a3b2ec8dc1323b0f7919c5013fb5027de
- e26df3b6bc8c55f7d07d178707f173e6a3881016eb3644498e162f0dc97da92d
- 4bb026581df62b024c8e3a15d0e52ff8d45124695c6e71ea14756abec409b15e
- ba3689bf7bc6f8d8468dde5c36df56163b40d0ddfc1991e35dde258cd25428b2
- 9113fcddc88f6eb5d38910e5bee2ce95736c9ad7a27984c1ce136790325d0382
- 2d49a9e3e31062a711b4027f834554f8bce5f479e01df5315d237903181b351d
- 29f87d32b658cba4093f0b90257404c262bc1d5a65de28ba6ad4ffdf4f65fe6e
- 90fe2b57f37d6bd045d22841fd192fccf4233bf8b21d85e5e927b68b0157b8f2
- d91e304a337858f2dcfbf1e6a366f95320fb0400022a4326487b648b9898a36d
- fc0269ad99451a97de8348efbdb248a5ba341d3684952bc448ec62817537252d
- f377698712265c87ceba162f0c33a26b86d23724a2613c637dd9af8b11c21da6
- cd56540cd8689a6874aeeed76841456c08d6afdaf3034598e60cf620f0ae0591
- 19bd1314e268493503c5570a5dda6b55eac3aac6608ec16257874bd799b285d8
- 477b2dd5a1d23713d56fcc976932b3ef0620b1b63f91cc0fde5a3587e2954981
- ad03ef341dfc36fbe7f74392b5619293894ee9554a164ec277d66dd21b780a2d
- ec511c74666b6e537725a1238a2429ab95d2b2ab01a5456d5d04a03f2a062649
- f6fbe16811654ff1fb44d939bd989f3d1eac5e28f986157030cb9bf3da290c60
- 0fcd7c4f78648a396eda077072706ceab6dee00e8ea22a7ff35a01740d0af805
- 609aa250c4b5ac9457f41f9dcfe63f983886fa7cd120e188538ebe247244ade1
- 22d4777f8a1da4131b37cbc3d5eb60dbae2a1c3db2d658d17a91ef67d3378622
- ad53d8cb65833146fc6740be5dd6938fe90d94256e428468dfd508c80346d511
- 2f2b21bc394589466cfdc813aad597347892cc9a43a3742808adc7ce44c907bb
- f55ad6ac989ab71a393c9d038f5cec473fe8ebd00197966b7051d493c53b59c8
- 74b35f75ad33504cb9e61ba7061d2425dae3870fc5230cf265f7d2ceef1911f2
- 8795abe52d8d274a2ae11fbc7df36809c810333fda63e64da495aa3278321350
- 11942f525df4f7681006b3e681656ef32e3afd248e2d51d3660a80b958f4947e
- 118c38f1051be7f51c34044429bc06d0eca114c0196b7b7482221c7add2063c6
- 293b1dc6e080ae3eac1de84ea384671c44cdf1d03fe51e5110749f8f358cbd64
- 129f838cc7d6a60993aa1e622aa56b748fb511b9578d35c7da200e837c7cc291
- 839cceb4d34eae502cac95ce4459c5080d8a42f8c3b9dcb6e51af4ff565e4c2e
- bda528cc5bbd85a350ae5329f9c87ca6a8eca5bf2e8579d878636de5ab99f2da
- 0a27d422d8ab0e1cc58258e431a83834239fec7285146b62e5de9b11cd3b3e9e
- 09c028c2289a401b45210b75f720ccad711216c756bce5ac04fb79620a91aee0
- adefbec6608c664c793d37e0a41a36ab19af1a5ba9e81e89e76252b49cfeb361
- be3bc809131c283b8deb542e11ed0878468b8db531696fdbee03978fde55be0e
- b15dcba2635f3329822d030c98a6dd92d7e6a19941797257e7e6a583dfa54efc
- 4feb0b3c0fc8a7347395d85cc11d57e8f2d585ccfd0836e65525a83e244cc883
- 12fe4665c093505b17a1b6807d8c508bc71a2d43ff9b9ffdf712ec4345e25866
- 6a7a89d1573d28a5803a4f4d18a08aa75a7136328ccd60df42e1d524d7886877
- 1884ea40e0f30433b31bfae38391aae4e632422fd895bb6d0ee79256e6259d81
- 0c9ce8e07011b5afd00ae5cdebeca156c5cc606c2d5820a03d8c0a89f2d7c0fa
- ea0b2f4ba9611770b640cfffe78fc60c5158d11cc32d235b966ec4a91c168ff4
- a5c6a4ffe798d6a23e8ec1532c04df2eb7a365a4f68c2b0dd1f48eadc6d31b04
- e9ad2f3a267741db5bbd7e687b7129eccd479c674fca19e2419b868f6b1e449a
- e9285e5adc7bded1b4883e4f16cec6ea332d73d9f495f807229222fbac1dd2ce
- 8148ab6928e472a7748348ed1b7e2e9ff572cd74ecd6cc68d74ea354475e10ab
- dc6f7a16016a2437a9711f8e734021d4a10e61b3c60cb8b09d805d75c8969336
- 253d02cfe9f5c222ae1544c6e57900093de6fd01162d6584f52e2833174fdc24
- 57f7a66f829e6ff154a93171100252157fe3ff0cc136dfa33fe3329f087a7eb8
- fbb85ddbd561784840349cbcf306771a6ffc698bd6955a3de1338d92d1670d11
- 2013668a450713b24fdfb34ec2488b7893bc01836879f9b1c0f739d5deee573a
- 90d14626e53c4391401e09607d758635348f3ce93f52d337741e95f60f36c720
- ffd41695457a2fc2abe85c553553f3ac0603cf2669604b5733120b794adbd818
- 6fc6b7a65481e9351a92b85b6ce041b7f6d3ffb1f7833748f0cb80b296ba6e41
- 4cde84a979fc9c967a3886fba6feeddf5c1ea7cb708762f1ea5ecd4d3cda62cc
- 09ac4a095622cc699022c5ecb83234df2b7dbf3035f1dc6fb439dc1e0059a480
- c4f5e0b453347dee387a91d0da2c4db65b8106dfe3511a6fcd6f79756b031096
- 3580879264f6639e965c8df100501fe1878c38321d9115895ab6ad2410539e9b
- bc906faf69697803a7b652ea2196bda2ab7667587fb7c39a257b6a16cf72dccf
- 3d987e833b8dc2b4871ab1dcb8719a4159ab11d8d28b884ad84236688b428151
- c0109510d5dc388e31211f0fd9a4f90bbf3420945775ffed6f18b1e9693e3555
- ffd47c59a9960a293002c4fff481f613892599191356589eb7b6950ef7465918
- ca02f60942a43d8f8b973baa3231df1f8c26328750baa2ed8d4cf07335084ebb
- ec4ba1d570601eaa1474ab7cfffafcff218a717e44e8d2d22ed0573676b0463e
- c20411a88faf07c7f4029c679d89be3b7140cf117a4c099f127000d799fbb418
- 14b711bd51096796ac6b38c30e3cced197831092956a4c6ff8d1f5ebb4432212
- 0ae4447d755593ee1931170d4187a07a29bf0690179acc39b7400a4c65cd07c5
- ffca6aa96572743200f9f0040a3e435766f6d7c15d6a4c72045a0cbb4db72eb4
- 41d056e80567216c565ab5796c9bd4e4b7a56fd14a8f99c044ea0206c079be76
- 4286e7035096d002a0f90aca19b93504d7c69354cf0c76eb8b3c93bae2b7885a
- e02ae43c682eb8a969b0b667d8562274762044930686389bc0539ed0f58dd0f1
- 1e9d18d242e3eb9165dde2704a9164e2520813c50467d16b444a738b49cfb4e9
- 413a6a2294dd1e2839364e1c43354d1b3effd047e3f051b94f8e3a9d8738ad72
- 40955ab5c1307aac6c2f5074dce860e8a9e120d9b57beeb27aa4d389f9d484df
- 7dc1e88b946583e7fb47a1d5797eda8e9043ed8840337d4ea00cd9414ad7532e
- 230c3debc5c42fad37ac8ffa2f9ce84a7694ccb20f5a92963c345bc434e3b0f7
- 9afa980905b73ca88f387bbb795341d3666530000447f36bdcb8502bf50470be
- 8d6761f6824176848db7297a3e98694b32215dc44ec6be5780d877639b05bb37
- c42a476182f22a2571711d3ad173884e9d394e00bc777011d01998573626f88d
- 9a5020855a37a861898bcc15c7bba0f1498a85104fc97a59bbcd31f26b7b2e68
- 29009de86551267b66080bcf4bb97609e09e383eb05b63c8f91aab5bbe30894c
- 190178582dd9876ca6f8fd012deb9e0739c6040e68f858202d8dc4d513a6afe7
- 7ad718a530a2913f775e62c656060af79ffde5c1f2c04138bcc068142f162a20
- 40d03f68520be536eaf020b60ac9d3937b0abfba833f2926f7f005f14860d376
- 91218ee352ba3942fc358e49b84bdb1aea26e8b0885fce82d5d8bba4dc71c16a
- 1d2bf492f606d7469e6895c52d763406c1bb0e36435d1f323ce5cdb2889d3efc
- b05c73ef9731d2087fdae483350a9d08e58e4bc4ec84062d7ae3efc87982ea37
- 7c0e0b139e8b6a4dfb6aae8121dec5c88e90481ed1de7f273f6f36726409e26a
- 67360b25498795a7dab3e15c74b5814987a991c08457ce1ec3baf0de95f81c82
- 995c64d437288c1d1f9403e5cbb98b33b736df00515e5cf73dfdf18fe731fb49
- dfb0482d39b66bcb62f794631f39971993da18da4d6c92817c3335f1711b1dd3
- 6244ffbbcb71729d31d1099b60545815a286062eb2ee2b00be07d6f05e4dc721
- 51745597945a0966846bb97ae18524649e1f759268b949d8aeaea4a53a9a1b96
- c26520e6e7f31183418a05793ee0d2a63e19578997176c130a5791f1cc2d72a7
- 0120990444ff05bbbe7d31f874319b23d43e2376052840e7f42696c69638206c
- 70f28e18e7f4083cd542e6bff6b2682f3876c5ef4bcf4323aa22a6d03d4a8a82
- 612689acd0dee5373e7b6020069b55a3e031218942be20367ee342420357cad4
- 935ee232fe107c1b452abaa2a3e7290b7b0021b0399cc038df7d298030bb638a
- f9657e6ce75007f96c25bf78fd1808c0e5f7478c55ce7f976aa76765cb46443f
- 31d11693da0c7ae79e8a5ec8ca6e59bf6141ac1bff82a986d120de021e140fd8
- 8f7fa78a7244ad95a1deee10bc8a30250dbdc6a4e94562d174737151d1533dc0
- cf1f4e50e28a697123dcabdc31514ae2dc058bfba762e7c10b5bc71f9adf443a
- 53b99df3805f084ba95710955746fe4e4ff410983b15bc7a574a60d6976629a9
- fda97b7e922b4cc08a77d6eda4ccabcbc1cfd8a5459166e4c1d0c4aeafef9678
- 6565bcda727664399cca345aae74de387aefd9f416b05ef1153ee5f16cf8c586
- 26eb4e606d4a18f15b7c03bd0f479101727bdf550db0c5d71325d889a986c58b
- e7c546134a20c98eddf47f85f661fc304e932d536781ddc35d52962762d402f5
TTPs & Attack Vectors
Tools, initial access, and MITRE ATT&CK techniques for INC Ransom
T1486
T1486
T1490
T1490
T1078
T1078
T1021
T1021
T1562
T1562
T1555
T1555
T1059
T1059
T1071
T1071
T1068
T1068
T1210
T1210
T1021.001
T1021.001
Victims(199)
| Company | Country | Status | Discovered | |
|---|---|---|---|---|
| bereskinparr.com | Canada | Claimed | 6 days ago | |
| centralrogers.com | United States | Claimed | 8 days ago | |
| seetelhotels.de | Germany | Claimed | 9 days ago | |
| verveba.com | United States | Claimed | 12 days ago | |
| fairfeelegalservices.com | United States | Claimed | 12 days ago | |
| nowaszkola.com | Poland | Claimed | 12 days ago | |
| coopecaja.fi.cr | Costa Rica | Claimed | 12 days ago | |
| FINANCIAMENTO LTDA | Brazil | Data Leaked | 14 days ago | |
| Great Lakes | India | Claimed | 15 days ago | |
| Brooks Law Firm | United States | Claimed | 16 days ago | |
| hsc.mb.ca | — | Claimed | 17 days ago | |
| Health Sciences Centre | Canada | Claimed | 17 days ago | |
| The New Community School | United States | Claimed | 20 days ago | |
| Architekt von Danwitz | Germany | Claimed | 21 days ago | |
| Harbor Pacific Contractors, Inc. | United States | Claimed | 21 days ago | |
| Acme Stamping & Wire Forming | United States | Claimed | 21 days ago | |
| Magnals | United States | Data Leaked | 22 days ago | |
| magnals.com | United States | Data Leaked | 22 days ago | |
| Guardian Pharmacy LLC | United States | Claimed | 27 days ago | |
| Den Hartog Industries | United States | Claimed | 27 days ago |
Page 1 of 10
Affected countries(89)
Countries where this group has been reported to target or leak victims.