incransom Ransomware Group

Key insights

• •Employs double extortion tactics to maximize leverage on victims.
• •Targets critical infrastructure sectors, including healthcare and public administration.
• •Utilizes advanced techniques like spear-phishing and RDP exploitation for initial access.
• •Custom ransomware employs AES-128 encryption with multi-threading to hinder recovery.
• •Effective in evading detection through legitimate process usage and security feature manipulation.
• •Cryptocurrency is the primary payment method for ransom demands.