Ransomware Intelligence

Latest Research on INC and The Gentlemen Ransomware: Exposed AI Infrastructure

Read the Research

INC Ransom Ransomware Group

Ransomware group profile

486Victims
RussiaSource country
125Impact score
Also Known As
GOLD IONIC

Description

INC Ransom is a sophisticated ransomware group active since July 2023, known for their double extortion tactics that involve not only encrypting data but also threatening to leak sensitive information. They target a variety of high-profile sectors, including healthcare and education, leveraging advanced techniques to infiltrate systems and maximize impact.

Key insights

  • •Employs double extortion tactics to maximize leverage on victims.
  • •Targets critical infrastructure sectors, including healthcare and public administration.
  • •Utilizes advanced techniques like spear-phishing and RDP exploitation for initial access.
  • •Custom ransomware employs AES-128 encryption with multi-threading to hinder recovery.
  • •Effective in evading detection through legitimate process usage and security feature manipulation.
  • •Cryptocurrency is the primary payment method for ransom demands.

Threat Level & Status Breakdown

For INC Ransom · Based on incidents in selected period

3.3threat level
Aggressiveness6/ 10
Lethality0.3/ 10
Criticality3.6/ 10

Status Breakdown

Data Leaked3.9%19
Negotiating0.8%4
Claimed95.3%463
First seenOct 2025
Last seenOct 2026
Avg ransom—
Payment rate—
Statusactive
Sophistication0
Last updatedOct 27, 2026

Recent activity

Monthly attack count for INC Ransom in the selected period

486Total attacks
51peak in Nov
37.4avg / month
↑ 18 vs first month
OctNovDecJanFebMarAprMayJunJulAugSepOct015304560

Intelligence

IOCs, YARA/Sigma rules, and related families for INC Ransom

  1. 01aa278b07b58dc46c84bd0b1b5c8e9ee4e62ea0bf7a695862444af32e87f1fd
  2. 7e851829ee37bc0cf65a268d1d1baa7a
  3. fb14aae2ed93a7ddfa718f433f585735
  4. 7d0c735c8b5bddf577727cdb7d10cb94e2de8d945d2653af6153f9ecb4479384
  5. fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced
  6. 1fb412212359a970be06b9a4578c1e68
  7. 63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7
  8. f484f919ba6e36ff33e4fb391b8859a94d89c172a465964f99d6113b55ced429
  9. 543991ca8d1c65113dff039b85ae3f9a87f503daec30f46929fd454bc57e5a91
  10. 3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab
  11. 0296e2ce999e67c76352613a718e11516fe1b0efc3ffdb8918fc999dd76a73a5
  12. 9218e2c37c339527736cdc9d9aad88de728931a3
  13. 25b9fdef3061c7dfea744830774ca0e289dba7c14be85f0d4695d382763b409b
  14. 75612233d32768186d0557dd39abbbd3284a2a29
  15. d0a63e059ed2c921c37c83246cdf4de0c8bc462b7c1d4b4ecd23a24196be7dd7
  16. 1e074d9dca6ef0edd24afb2d13ca4429def5fc5486cd4170c989ef60efd0bbb0
  17. e502b8d617a2cd9bfa41762282a0ff81
  18. 3403b92056d7645acfb7236824cc58b15e4d5395
  19. 77962a384d251f0aa8e3008a88f206d6cb1f7401c759c4614e3bfe865e3e985c
  20. 6cd349eda0fa6c8b274a0920852c68f8b727afea1fdbc69ad183cef05d9cf141
  21. 21ee713585ed802b675b7144f7ebd875573e09809c2dff21e65da3d127fdca71
  22. 0cb89b37239f94d214c12419addf49e3143ae71e53fe1934fa5776c8eafd9c51
  23. 48868c98dfabd703031587cffdbe5ca26ac180a15e89a52e59915710f1836f28
  24. 7f37351979c249417cb180b4ede0ed17e5fe2a1f08add4d72606b589f8fdb245
  25. 5cc212f84d2bf3fbab165aaf09b16e00fcf2f1ccd880d24b14404c53dcdbf241
  26. 60aeb9f7bccf377ff02ed64783e66a62c0f976878d9729b067bc7e5b0b9da9d6
  27. 5fda381a9884f7be2d57b8a290f389578a9d2f63e2ecb98bd773248a7eb99fa2
  28. 312f34ee8c7b2199a3e78b4a52bd87700cc8f3aa01aa641e5d899501cb720775
  29. ea9154e374e4f77bc2cf54282e23543573980342a85bc888cb23f20b8bbba081
  30. 8c470301dcb7278f73e622f1950073567b34011c64b60cdfbb0f89803923a5a3
  31. 81a9af3846bad3a1107164ff7cf0a08e020b31a3b32fd17866e17d4c1565f7f2
  32. 1e1e68bbb899450a57274a8b12082ed4e2040a2aae77014f20431689d2b4edee
  33. c2b0ae0a1f42a139abe4dd612676066ec1426394
  34. b4ee1f50fbb49f0ff5fde3d026343bc23ee08d51
  35. 5e5b716f2385c818ec61198be1a2a07a4560eac5
  36. 04d4a9fbb32e967200eb98be014ca914a03bfa6b
  37. b6df166291f80ee89032d769c99714f3
  38. 5f3a55201c511c9ff9be4c16c41028a2
  39. 5cb00bbfe818ee3e85fb99ab1db1af7c
  40. 54d21399b8b52b48a0fef68450593e45
  41. 2ff86a4fdfec4a5b49d5545f9a62ec4c
  42. 3c92be8d6c8380bb7122a80aa3f9880fa81e64ec
  43. 28685dff00aa1752b62a8580955b2530d63092bdcc0528b872a668cddad78c11
  44. 290d41e7436238066a8aacbd63a805aeeefc00d8798116dc702eccf6df3eae37
  45. cc2c8ac5aea8d7c36e9161d54e4255f3
  46. 0dc6a5ce14838813e297a83e3c3c0868c7a211ee2da9c9705e5a282e65f089fe
  47. c7bbc3728ccbc968688e7ea5b9cff8c6f75238b1
  48. bac340524549410f51b060f21abb7db30c0c5378edd2e3ac15b526e141417e89
  49. 9cfe9b894af68946ddc7e6f4cbdb085a92c4009ea00554c407beb5a8fc29f6b7
  50. 8af1afc82c0d578a54cc34d09544a0695ec2b0d5f244bf1f1bb4993ee7614734
  51. ef431e36a8ac12051af588d800e1d8128d583a9d4c68187709263a13564081cd
  52. 55a81d88fff3dc3de0e42724b0a992d4ef382b0e1a82187abf9d635ab89b2bae
  53. e3191e13e6ff9a1a85d1dcffc4e7a8bdcc12329f8ecf0ad825f8670b0d12c97a
  54. 59d552bb3abeb278f0f9deb5b838bf6e
  55. 6aeee2fff046a115f1ff8e78c8794ca9
  56. 2a92762213ccde7bfac2a0a72f1816f2
  57. 75b5f0e4a17efa8efe6384a9c3d7a667
  58. e205d76c2f1d1bf356fddf6a6aa22601
  59. 8021f32be9faef6137ea9d442ebe0059
  60. 55cf090e07a9ecbff062c47ef93fd1be
  61. 32d741ce1461d1e310452ef29ec7906326970af07f9139ea9260abb2df6f0ae5
  62. bee987e441c5b1e49eefed56b04adbee72a6fcb4ddde6bcf4d4abb3bfbc4661c
  63. 2d3dfec60201dcc8d0b08abefa8d43efe5f62c33110f036560baa6f1bf24ea8a
  64. a190c6075a60b528ec4185e5d4d81ac4d039e5d357ab33e2384ae21b02e29ad4
  65. 7bfc7148c9eb8a3bcc6472e56e7d5be901462873d793323c69067d6dbfa2f79a
  66. e6ce4b7c40d38a246c0dcc88c4f005fe28e3b5a8da603116881f7c5356771c70
  67. dc36944e733c1c70145681551b32ea95e17770a490e83d61ca525807e6d1fc51
  68. 8e7027367756ed9cee15529fd39c839f3773e0930fe8207b9a8654625128dd60
  69. 53983a29efdc724bf6ae68c9e11bb165945571b079a3c85f213c60bdc4bd2af3
  70. 85b79bbc907b8c0eeacc5da5ac35d7387c69faeb2f7822b3e2dca94f80ed0851
  71. 3363e3af60b1e25f8cdc70206f1d7b89e28bb72a7dd43f4460f3ee07d7508f80
  72. ad1b8bdfb562ede7017003679185c07b6f746778ee7ed179c54e3c35bc0c4ccb
  73. a92641523ad121aaf140234a5ee70940b1fee67f12ea9a67c4ebb8fa9fbdcbeb
  74. 78f2627f3795ea508fecac16227bbff8
  75. 5f41cf47e7dbfe9d4290d64877c2db7fc9509fc15ce1e5ccda66cadefcbcb9fe
  76. ae593146b2cd736b65d71386caa86669577527bd1574b4e4beb9539b566f1190
  77. c11d57472a70943367581b31d8732b29885470741b8aed1c7692956d9666eb91
  78. e2b5fc7e457661fb886e8bac99d15b0cba3871fc72950ca4802aa6f0c4494553
  79. bef87021caf35bf50370c0a11ccf83de14cbc1558380b690a63f87f1bf4cb366
  80. 8bba473887e6d31f60d13c4fdc903bfbf688f912ad8aa5ea171ae626d3a7b9a4
  81. d4ae978d0fa31d31144a0289f2307393deb992a54e4e7335e923511ac6bbc47e
  82. 27d39120cdc08ce2ae074abcdde208d533aa8f3f6569c0c182600f3abfd96851
  83. 7114be5cb487e2975d2167a8660f164a3b2ec8dc1323b0f7919c5013fb5027de
  84. e26df3b6bc8c55f7d07d178707f173e6a3881016eb3644498e162f0dc97da92d
  85. 4bb026581df62b024c8e3a15d0e52ff8d45124695c6e71ea14756abec409b15e
  86. ba3689bf7bc6f8d8468dde5c36df56163b40d0ddfc1991e35dde258cd25428b2
  87. 9113fcddc88f6eb5d38910e5bee2ce95736c9ad7a27984c1ce136790325d0382
  88. 2d49a9e3e31062a711b4027f834554f8bce5f479e01df5315d237903181b351d
  89. 29f87d32b658cba4093f0b90257404c262bc1d5a65de28ba6ad4ffdf4f65fe6e
  90. 90fe2b57f37d6bd045d22841fd192fccf4233bf8b21d85e5e927b68b0157b8f2
  91. d91e304a337858f2dcfbf1e6a366f95320fb0400022a4326487b648b9898a36d
  92. fc0269ad99451a97de8348efbdb248a5ba341d3684952bc448ec62817537252d
  93. f377698712265c87ceba162f0c33a26b86d23724a2613c637dd9af8b11c21da6
  94. cd56540cd8689a6874aeeed76841456c08d6afdaf3034598e60cf620f0ae0591
  95. 19bd1314e268493503c5570a5dda6b55eac3aac6608ec16257874bd799b285d8
  96. 477b2dd5a1d23713d56fcc976932b3ef0620b1b63f91cc0fde5a3587e2954981
  97. ad03ef341dfc36fbe7f74392b5619293894ee9554a164ec277d66dd21b780a2d
  98. ec511c74666b6e537725a1238a2429ab95d2b2ab01a5456d5d04a03f2a062649
  99. f6fbe16811654ff1fb44d939bd989f3d1eac5e28f986157030cb9bf3da290c60
  100. 0fcd7c4f78648a396eda077072706ceab6dee00e8ea22a7ff35a01740d0af805
  101. 609aa250c4b5ac9457f41f9dcfe63f983886fa7cd120e188538ebe247244ade1
  102. 22d4777f8a1da4131b37cbc3d5eb60dbae2a1c3db2d658d17a91ef67d3378622
  103. ad53d8cb65833146fc6740be5dd6938fe90d94256e428468dfd508c80346d511
  104. 2f2b21bc394589466cfdc813aad597347892cc9a43a3742808adc7ce44c907bb
  105. f55ad6ac989ab71a393c9d038f5cec473fe8ebd00197966b7051d493c53b59c8
  106. 74b35f75ad33504cb9e61ba7061d2425dae3870fc5230cf265f7d2ceef1911f2
  107. 8795abe52d8d274a2ae11fbc7df36809c810333fda63e64da495aa3278321350
  108. 11942f525df4f7681006b3e681656ef32e3afd248e2d51d3660a80b958f4947e
  109. 118c38f1051be7f51c34044429bc06d0eca114c0196b7b7482221c7add2063c6
  110. 293b1dc6e080ae3eac1de84ea384671c44cdf1d03fe51e5110749f8f358cbd64
  111. 129f838cc7d6a60993aa1e622aa56b748fb511b9578d35c7da200e837c7cc291
  112. 839cceb4d34eae502cac95ce4459c5080d8a42f8c3b9dcb6e51af4ff565e4c2e
  113. bda528cc5bbd85a350ae5329f9c87ca6a8eca5bf2e8579d878636de5ab99f2da
  114. 0a27d422d8ab0e1cc58258e431a83834239fec7285146b62e5de9b11cd3b3e9e
  115. 09c028c2289a401b45210b75f720ccad711216c756bce5ac04fb79620a91aee0
  116. adefbec6608c664c793d37e0a41a36ab19af1a5ba9e81e89e76252b49cfeb361
  117. be3bc809131c283b8deb542e11ed0878468b8db531696fdbee03978fde55be0e
  118. b15dcba2635f3329822d030c98a6dd92d7e6a19941797257e7e6a583dfa54efc
  119. 4feb0b3c0fc8a7347395d85cc11d57e8f2d585ccfd0836e65525a83e244cc883
  120. 12fe4665c093505b17a1b6807d8c508bc71a2d43ff9b9ffdf712ec4345e25866
  121. 6a7a89d1573d28a5803a4f4d18a08aa75a7136328ccd60df42e1d524d7886877
  122. 1884ea40e0f30433b31bfae38391aae4e632422fd895bb6d0ee79256e6259d81
  123. 0c9ce8e07011b5afd00ae5cdebeca156c5cc606c2d5820a03d8c0a89f2d7c0fa
  124. ea0b2f4ba9611770b640cfffe78fc60c5158d11cc32d235b966ec4a91c168ff4
  125. a5c6a4ffe798d6a23e8ec1532c04df2eb7a365a4f68c2b0dd1f48eadc6d31b04
  126. e9ad2f3a267741db5bbd7e687b7129eccd479c674fca19e2419b868f6b1e449a
  127. e9285e5adc7bded1b4883e4f16cec6ea332d73d9f495f807229222fbac1dd2ce
  128. 8148ab6928e472a7748348ed1b7e2e9ff572cd74ecd6cc68d74ea354475e10ab
  129. dc6f7a16016a2437a9711f8e734021d4a10e61b3c60cb8b09d805d75c8969336
  130. 253d02cfe9f5c222ae1544c6e57900093de6fd01162d6584f52e2833174fdc24
  131. 57f7a66f829e6ff154a93171100252157fe3ff0cc136dfa33fe3329f087a7eb8
  132. fbb85ddbd561784840349cbcf306771a6ffc698bd6955a3de1338d92d1670d11
  133. 2013668a450713b24fdfb34ec2488b7893bc01836879f9b1c0f739d5deee573a
  134. 90d14626e53c4391401e09607d758635348f3ce93f52d337741e95f60f36c720
  135. ffd41695457a2fc2abe85c553553f3ac0603cf2669604b5733120b794adbd818
  136. 6fc6b7a65481e9351a92b85b6ce041b7f6d3ffb1f7833748f0cb80b296ba6e41
  137. 4cde84a979fc9c967a3886fba6feeddf5c1ea7cb708762f1ea5ecd4d3cda62cc
  138. 09ac4a095622cc699022c5ecb83234df2b7dbf3035f1dc6fb439dc1e0059a480
  139. c4f5e0b453347dee387a91d0da2c4db65b8106dfe3511a6fcd6f79756b031096
  140. 3580879264f6639e965c8df100501fe1878c38321d9115895ab6ad2410539e9b
  141. bc906faf69697803a7b652ea2196bda2ab7667587fb7c39a257b6a16cf72dccf
  142. 3d987e833b8dc2b4871ab1dcb8719a4159ab11d8d28b884ad84236688b428151
  143. c0109510d5dc388e31211f0fd9a4f90bbf3420945775ffed6f18b1e9693e3555
  144. ffd47c59a9960a293002c4fff481f613892599191356589eb7b6950ef7465918
  145. ca02f60942a43d8f8b973baa3231df1f8c26328750baa2ed8d4cf07335084ebb
  146. ec4ba1d570601eaa1474ab7cfffafcff218a717e44e8d2d22ed0573676b0463e
  147. c20411a88faf07c7f4029c679d89be3b7140cf117a4c099f127000d799fbb418
  148. 14b711bd51096796ac6b38c30e3cced197831092956a4c6ff8d1f5ebb4432212
  149. 0ae4447d755593ee1931170d4187a07a29bf0690179acc39b7400a4c65cd07c5
  150. ffca6aa96572743200f9f0040a3e435766f6d7c15d6a4c72045a0cbb4db72eb4
  151. 41d056e80567216c565ab5796c9bd4e4b7a56fd14a8f99c044ea0206c079be76
  152. 4286e7035096d002a0f90aca19b93504d7c69354cf0c76eb8b3c93bae2b7885a
  153. e02ae43c682eb8a969b0b667d8562274762044930686389bc0539ed0f58dd0f1
  154. 1e9d18d242e3eb9165dde2704a9164e2520813c50467d16b444a738b49cfb4e9
  155. 413a6a2294dd1e2839364e1c43354d1b3effd047e3f051b94f8e3a9d8738ad72
  156. 40955ab5c1307aac6c2f5074dce860e8a9e120d9b57beeb27aa4d389f9d484df
  157. 7dc1e88b946583e7fb47a1d5797eda8e9043ed8840337d4ea00cd9414ad7532e
  158. 230c3debc5c42fad37ac8ffa2f9ce84a7694ccb20f5a92963c345bc434e3b0f7
  159. 9afa980905b73ca88f387bbb795341d3666530000447f36bdcb8502bf50470be
  160. 8d6761f6824176848db7297a3e98694b32215dc44ec6be5780d877639b05bb37
  161. c42a476182f22a2571711d3ad173884e9d394e00bc777011d01998573626f88d
  162. 9a5020855a37a861898bcc15c7bba0f1498a85104fc97a59bbcd31f26b7b2e68
  163. 29009de86551267b66080bcf4bb97609e09e383eb05b63c8f91aab5bbe30894c
  164. 190178582dd9876ca6f8fd012deb9e0739c6040e68f858202d8dc4d513a6afe7
  165. 7ad718a530a2913f775e62c656060af79ffde5c1f2c04138bcc068142f162a20
  166. 40d03f68520be536eaf020b60ac9d3937b0abfba833f2926f7f005f14860d376
  167. 91218ee352ba3942fc358e49b84bdb1aea26e8b0885fce82d5d8bba4dc71c16a
  168. 1d2bf492f606d7469e6895c52d763406c1bb0e36435d1f323ce5cdb2889d3efc
  169. b05c73ef9731d2087fdae483350a9d08e58e4bc4ec84062d7ae3efc87982ea37
  170. 7c0e0b139e8b6a4dfb6aae8121dec5c88e90481ed1de7f273f6f36726409e26a
  171. 67360b25498795a7dab3e15c74b5814987a991c08457ce1ec3baf0de95f81c82
  172. 995c64d437288c1d1f9403e5cbb98b33b736df00515e5cf73dfdf18fe731fb49
  173. dfb0482d39b66bcb62f794631f39971993da18da4d6c92817c3335f1711b1dd3
  174. 6244ffbbcb71729d31d1099b60545815a286062eb2ee2b00be07d6f05e4dc721
  175. 51745597945a0966846bb97ae18524649e1f759268b949d8aeaea4a53a9a1b96
  176. c26520e6e7f31183418a05793ee0d2a63e19578997176c130a5791f1cc2d72a7
  177. 0120990444ff05bbbe7d31f874319b23d43e2376052840e7f42696c69638206c
  178. 70f28e18e7f4083cd542e6bff6b2682f3876c5ef4bcf4323aa22a6d03d4a8a82
  179. 612689acd0dee5373e7b6020069b55a3e031218942be20367ee342420357cad4
  180. 935ee232fe107c1b452abaa2a3e7290b7b0021b0399cc038df7d298030bb638a
  181. f9657e6ce75007f96c25bf78fd1808c0e5f7478c55ce7f976aa76765cb46443f
  182. 31d11693da0c7ae79e8a5ec8ca6e59bf6141ac1bff82a986d120de021e140fd8
  183. 8f7fa78a7244ad95a1deee10bc8a30250dbdc6a4e94562d174737151d1533dc0
  184. cf1f4e50e28a697123dcabdc31514ae2dc058bfba762e7c10b5bc71f9adf443a
  185. 53b99df3805f084ba95710955746fe4e4ff410983b15bc7a574a60d6976629a9
  186. fda97b7e922b4cc08a77d6eda4ccabcbc1cfd8a5459166e4c1d0c4aeafef9678
  187. 6565bcda727664399cca345aae74de387aefd9f416b05ef1153ee5f16cf8c586
  188. 26eb4e606d4a18f15b7c03bd0f479101727bdf550db0c5d71325d889a986c58b
  189. e7c546134a20c98eddf47f85f661fc304e932d536781ddc35d52962762d402f5
View full IOC feed319 total

TTPs & Attack Vectors

Tools, initial access, and MITRE ATT&CK techniques for INC Ransom

CVE-2026-63030
CVE-2026-41940
CVE-2026-41089
CVE-2026-35616
CVE-2026-24858
CVE-2026-15409
CVE-2026-0300
CVE-2025-59719
CVE-2025-59718
CVE-2025-5777
CVE-2025-53770
CVE-2025-49706
CVE-2025-49704
CVE-2024-57727
CVE-2024-23109
CVE-2024-23108
CVE-2024-21762
CVE-2023-50358
CVE-2023-4966
CVE-2023-48788
CVE-2023-3519
CVE-2023-33308
CVE-2023-27997
CVE-2022-42475
CVE-2022-40684
CVE-2022-31699
CVE-2022-27596
CVE-2022-27593
CVE-2022-26923
CVE-2021-42287
CVE-2021-42278
CVE-2021-39238
CVE-2021-36942
CVE-2021-34527
CVE-2021-28799
CVE-2021-22005
CVE-2021-21985
CVE-2021-21974
CVE-2021-1675
CVE-2020-1472
CVE-2019-7195
CVE-2019-7194
CVE-2019-7193
CVE-2019-7192
CVE-2019-5591
CVE-2019-18935
CVE-2018-13379
CVE-2017-0143
CVE-2014-9222
CVE-2013-4784
Other

T1486

T1486

T1490

T1490

T1078

T1078

T1021

T1021

T1562

T1562

T1555

T1555

T1059

T1059

T1071

T1071

T1068

T1068

T1210

T1210

T1021.001

T1021.001

Victims(199)

CanadaProfessional Servicessmartbiggar.ca
Claimed
6 days ago
United StatesOthercentralrogers.com
Claimed
8 days ago
GermanyHospitalityseetelhotels.de
Claimed
9 days ago
United StatesTechnologyatt.com
Claimed
12 days ago
United StatesProfessional Servicesfairfeelegalservices.com
Claimed
12 days ago
PolandEducationnowaszkola.com
Claimed
12 days ago
Costa RicaFinancial Servicescoopecaja.fi.cr
Claimed
12 days ago
BrazilFinancial Servicesh2financiamento.com.br
Data Leaked
14 days ago
IndiaEducationgreatlakes.edu.in
Claimed
15 days ago
United StatesProfessional Servicesbrookslawfirm.com
Claimed
16 days ago
Healthcarehsc.mb.ca
Claimed
17 days ago
CanadaHealthcarehsc.mb.ca
Claimed
17 days ago
United StatesEducationtncs.org
Claimed
20 days ago
GermanyProfessional Servicesarchitekt-vondanwitz.de
Claimed
21 days ago
United StatesTransportationharborpacific.com
Claimed
21 days ago
United StatesManufacturingacmestamping.com
Claimed
21 days ago
United StatesOthermagnals.com
Data Leaked
22 days ago
United StatesOthermagnals.com
Data Leaked
22 days ago
United StatesHealthcareguardianpharmacy.com
Claimed
27 days ago
United StatesManufacturingdenhartogindustries.com
Claimed
27 days ago

Page 1 of 10

Affected countries(89)

Countries where this group has been reported to target or leak victims.