DataBreachesDissent
Operation Silent Vector targets INC ransomware with bounty
Part of the INC Ransomware story · since 30 Jun
- Tue 30 Jun, 10:41 UTC. SecurityOnline, first report. INC Ransomware Hits APAC Factories, Japanese Food Firms via GPO.
- Thu 30 Jul, 15:06 UTC. DataBreaches, its first report on the story. Operation Silent Vector targets INC ransomware with bounty. This article, 2nd of 7.
- Mon 3 Aug, 03:01 UTC. SecurityOnline. SonicWall SMA Exploit Chain Now Fuels INC Ransomware Attacks. Cites a CVE in CISA KEV.
- Mon 3 Aug, 11:01 UTC. SecurityWeek, its first report on the story. INC Ransomware exploits CVE-2026-15409, gains root on SonicWall. Cites a CVE in CISA KEV.
- Tue 4 Aug, 14:31 UTC. Security Affairs, its first report on the story. INC Ransomware abuses CVE-2026-15409 in SonicWall, calls victims. Cites a CVE in CISA KEV.
- Tue 20 Oct, 11:56 UTC. SOCRadar, its first report on the story. AI-Driven Ransomware Campaign Targeted 62 Organisations. Cites a CVE in CISA KEV.
- Fri 23 Oct, 08:35 UTC. SecurityOnline. INC Ransomware Exposed Using AI and Custom Malware Against Victims. Cites a CVE in CISA KEV.
Crime Stoppers International has launched a new program called Operation Silent Vector, targeting the INC Ransomware group. This initiative seeks tips to help arrest cybercriminals associated with INC Ransomware, which has disrupted essential services like healthcare across various regions. The program includes a bounty for validated information leading to an arrest, in collaboration with partners like Fortinet. This is the first target in a series of bounties, with more to be announced in the future.
The organization emphasizes that it maintains a platform for anonymous reporting and clarifies that it operates independently of Crime Stoppers USA.
How the story developed
7 articles from 5 outlets since 30 Jun. Quiet since 23 Oct. This was the 2nd report, 30 days after the first.
- Tue 30 Jun, 10:41 UTC. SecurityOnline, first report. INC Ransomware Hits APAC Factories, Japanese Food Firms via GPO.
- Thu 30 Jul, 15:06 UTC. DataBreaches, its first report on the story. Operation Silent Vector targets INC ransomware with bounty. This article, 2nd of 7.
- Mon 3 Aug, 03:01 UTC. SecurityOnline. SonicWall SMA Exploit Chain Now Fuels INC Ransomware Attacks. Cites a CVE in CISA KEV.
- Mon 3 Aug, 11:01 UTC. SecurityWeek, its first report on the story. INC Ransomware exploits CVE-2026-15409, gains root on SonicWall. Cites a CVE in CISA KEV.
- Tue 4 Aug, 14:31 UTC. Security Affairs, its first report on the story. INC Ransomware abuses CVE-2026-15409 in SonicWall, calls victims. Cites a CVE in CISA KEV.
- Tue 20 Oct, 11:56 UTC. SOCRadar, its first report on the story. AI-Driven Ransomware Campaign Targeted 62 Organisations. Cites a CVE in CISA KEV.
- Fri 23 Oct, 08:35 UTC. SecurityOnline. INC Ransomware Exposed Using AI and Custom Malware Against Victims. Cites a CVE in CISA KEV.
- Known exploited CVE
- No CVE
- Larger: an outlet’s first report
- Coverage over time
- Quiet time, folded
Show all 7 articles as a listHide the list
- Tue 30 JunDay 01
- INC Ransomware Hits APAC Factories, Japanese Food Firms via GPO10:41 · SecurityOnline · First report
Quiet for 4 weeks
Thu 30 JulDay 301- Operation Silent Vector targets INC ransomware with bounty15:06 · DataBreaches · Picked up again · This article, 2nd of 7
Quiet for 3 days
Mon 3 AugDay 342- SonicWall SMA Exploit Chain Now Fuels INC Ransomware Attacks03:01 · SecurityOnline · Exploited CVE · Picked up again · Known exploited CVE
- INC Ransomware exploits CVE-2026-15409, gains root on SonicWall11:01 · SecurityWeek · Known exploited CVE
- Tue 4 AugDay 351
- INC Ransomware abuses CVE-2026-15409 in SonicWall, calls victims14:31 · Security Affairs · Known exploited CVE
Quiet for 11 weeks
Tue 20 OctDay 1121- AI-Driven Ransomware Campaign Targeted 62 Organisations11:56 · SOCRadar · Picked up again · Known exploited CVE
Quiet for 3 days
Fri 23 OctDay 1151- INC Ransomware Exposed Using AI and Custom Malware Against Victims08:35 · SecurityOnline · Picked up again · Known exploited CVE