Ransomware needs a way in. Stolen credentials are the cheapest one.

DUCON Ransomware Attack

ducon.com.coRansomed

incransomGroup

ColombiaCountry

Jul 28, 2026Discovered

Overview

View group profile

Domain

ducon.com.co

Industry

Manufacturing

Country

Colombia

Discovered

2 months ago

Attack date

Jul 28, 2026

Confidence

100%

Severity

Medium

Status

Claimed

Threat group

incransom

Total victims

481

First seen

Oct 2025

Last seen

Oct 2026

Group status

active

Sophistication

Impact score

122

Threat level

4.6/10

Aggressiveness10/10

Lethality0.3/10

Criticality3.3/10

Status breakdown

Data Leaked3.3%16

Negotiating0.8%4

Claimed

this victim

95.8%461

Targeted sectors

Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Manufacturing

Known target sector

Country

Colombia

Frequently targeted country

Other victims

View all (481)

Same group · incransom

Group activity

Monthly attacks · incransom

481

total · avg 37/mo