Risk Letters

Threat actor

INC Ransom

TLP:CLEAR

Facts

  • Also known as: GOLD IONIC
  • Motivation: Financial
  • Malware and tools: 7-Zip, AdFind, Advanced IP Scanner, AnyDesk, BackBlaze, Bitvise SSH Client, esentutl, INC Ransomware, MEGA, Mimikatz, Net, Nltest
  • Techniques (MITRE ATT&CK): Application Layer Protocol, Archive via Utility, Data Encrypted for Impact, Data Staged, Disable or Modify Tools, Domain Account, Domain Groups, Exploit Public-Facing Application, File Deletion, Financial Theft, Ingress Tool Transfer, Lateral Tool Transfer

Members get the actor's profile, its recent incidents and our assessment in the dashboard.

Get the full brief

Data: NVD (public domain), CISA KEV, FIRST EPSS, MITRE ATT&CK, AlienVault OTX.