Skip to content

CyberSIXT Search

Threat actor · coverage timeline

INC

22 articles from 8 outlets between 29 Apr and 23 Oct. First reported by DataBreaches. The busiest day was Tue 20 Oct, with 4 articles.

Articles: 22; all time · from 8 outlets
Days covered: 15; of 178 days · all time
Busiest day: 4; articles on Tue 20 Oct
Last 7 days: 0a day; vs 0.1 a day · previous 7 days
First report: 29 Apr; DataBreaches
CVEs named: 7; 7 in CISA KEV · in these articles

Coverage over time

22 articles · 29 Apr – 23 Oct

29 AprFirst report29 Apr · DataBreaches

Show as table

INC: articles per day
Day (UTC)	Articles	Outlets
Wed 29 Apr	1	DataBreaches 1
Thu 30 Apr	1	SecurityWeek 1
Sat 23 May	1	DataBreaches 1
Wed 17 Jun	1	Dark Reading 1
Thu 18 Jun	1	The Hacker News 1
Tue 30 Jun	1	SecurityOnline 1
Thu 2 Jul	3	The Hacker News 1, Security Affairs 1, Dark Reading 1
Fri 17 Jul	1	Dark Reading 1
Thu 30 Jul	1	DataBreaches 1
Mon 3 Aug	2	SecurityOnline 1, SecurityWeek 1
Tue 4 Aug	1	Security Affairs 1
Wed 9 Sep	1	DataBreaches 1
Tue 20 Oct	4	SecurityOnline 1, SOCRadar 1, The Hacker News 1, DataBreaches 1
Wed 21 Oct	1	Infosecurity 1
Fri 23 Oct	2	SecurityOnline 1, The Hacker News 1

Articles

22 articles

Fri 23 Oct2 articles

18:36
AI Agents Power Ransomware Affiliates’ Attacks on Edge DevicesThe Hacker News
08:35
INC Ransomware Exposed Using AI and Custom Malware Against VictimsSecurityOnline

Wed 21 Oct1 article

12:22
Ransomware Attacks Jump 50% as Data Theft Replaces EncryptionInfosecurity

Tue 20 Oct4 articles

16:48
Ransomware gangs exploit patched Palo Alto VPN security flawDataBreaches
16:13
Qilin and INC ransomware gangs exploit Palo Alto VPN flaw to bypass MFAThe Hacker News
11:56
AI-Driven Ransomware Campaign Targeted 62 OrganisationsSOCRadar
10:43
Ransomware gangs bypass MFA through PAN OS VPN flaw CVE-2026-0257SecurityOnline

Wed 9 Sep1 article

12:26
New Jersey School District Network Outage Linked to Ransomware AttackDataBreaches

Tue 4 Aug1 article

14:31
INC Ransomware abuses CVE-2026-15409 in SonicWall, calls victimsSecurity Affairs

Mon 3 Aug2 articles

11:01
INC Ransomware exploits CVE-2026-15409, gains root on SonicWallSecurityWeek
03:01
SonicWall SMA Exploit Chain Now Fuels INC Ransomware AttacksSecurityOnline

Thu 30 Jul1 article

15:06
Operation Silent Vector targets INC ransomware with bountyDataBreaches

Fri 17 Jul1 article

21:01
SonicWall CVE-2026-15409 flaw lets ransomware group hijack VPNsDark Reading

Thu 2 Jul3 articles

20:12
FortiBleed breach fuels ransomware risk for Inc and Lynx gangsDark Reading
11:11
FortiBleed Campaign Fuels Ransomware on 430k FortiGate DevicesSecurity Affairs
09:21
FortiBleed Credential Theft Fuels INC and Lynx Ransomware SurgeThe Hacker News

Tue 30 Jun1 article

10:41
INC Ransomware Hits APAC Factories, Japanese Food Firms via GPOSecurityOnline

Thu 18 Jun1 article

15:10
INC ransomware jumps as RaaS threat, over 830 victims since 2023The Hacker News

Wed 17 Jun1 article

20:48
INC ransomware hits over 800 victims, targets healthcare sectorDark Reading

Sat 23 May1 article

17:32
INC Ransom Claims 275GB Beacon Mutual Data After Jan BreachDataBreaches

Thu 30 Apr1 article

08:46
Sandhills Medical Ransomware Leak Exposes 170k Patient RecordsSecurityWeek

Wed 29 Apr1 article

16:11
Sandhills Medical breach leaks 169k records via INC RansomDataBreaches · first report