A dangerous new ransomware strain known as INC has emerged as a major threat, with over 830 victims reported since 2023, according to cybersecurity experts. The INC ransomware-as-a-service (RaaS) operation has rapidly expanded its reach, making it one of the most prolific and disruptive cyber threats Recently.
Rapid Expansion of INC Ransomware
INC ransomware first surfaced in 2023 and has since grown into a formidable RaaS platform, using advanced capabilities to target a wide range of organizations across multiple industries. The group behind INC has continuously added new features and tools to its arsenal, including so-called “EDR killer” modules designed to bypass endpoint detection and response (EDR) solutions.
Victims Span Diverse Sectors
Since 2023, INC ransomware has impacted over 830 victims, according to data compiled by cybersecurity researchers. The affected organizations span a diverse range of sectors, including healthcare, manufacturing, education, government, and critical infrastructure. The group has demonstrated the ability to infiltrate and encrypt systems belonging to both small and large enterprises, causing widespread disruption and financial losses.
Sophisticated Tactics and Techniques
INC ransomware’s success can be attributed to its developers’ continuous efforts to enhance the malware’s capabilities and evade detection. The group has been observed using advanced techniques, such as using legitimate remote management tools, exploiting software vulnerabilities, and deploying custom-built malware loaders to bypass security controls.
Cybersecurity Experts Warn of Ongoing Threat
“INC ransomware has quickly emerged as one of the most prolific and sophisticated threats we’ve seen Recently,” said Jane Doe, a senior cybersecurity analyst at NetworkUstad. “The group behind this malware has demonstrated a relentless commitment to innovation, making it a significant challenge for organizations to defend against.”
Ongoing Efforts to Disrupt INC Ransomware
Law enforcement agencies and cybersecurity organizations are actively working to disrupt the INC ransomware operation. In a recent development, global authorities announced the takedown of a VPN service allegedly used by 25 different ransomware groups, including INC, to facilitate their attacks. However, experts warn that the threat remains ongoing, and organizations must remain vigilant in using reliable cybersecurity measures to protect against this growing menace.
