INC Ransom: Infrastructure Analysis, Operational Tradecraft, and Detection Opportunities

By Ireneusz Tarnowski

Read the original on medium.com (new tab)

Excerpt

19 min read

2 days ago

Press enter or click to view image in full size

The study was prepared in cooperation with Piotr Chęciński.

Executive Summary

INC Ransom is an active cybercriminal group operating under the Ransomware-as-a-Service (RaaS) model and has been observed since mid-2023. The group primarily conducts double extortion attacks, combining data exfiltration with the encryption of victims’ systems. According to publicly available data, INC Ransom has been among the most activ…

The opening of the report, shown for reference. The full report, with its figures and indicators, is published by Medium on medium.com.