INC Ransom — Ransomware Profile
INC Ransom is a ransomware and data extortion threat group associated with the deployment of INC Ransomware that has been active since at least July 2023. INC Ransom has targeted organizations worldwide most commonly in the industrial, healthcare, and education sectors in the US and Europe.Also tracked as
GOLD IONIC
Tools & malware
- AdFind Network Reconnaissance
- esentutl LOLBin
- INC Ransomware Ransomware
- Net Network Reconnaissance
- Nltest Network Reconnaissance
- PsExec Remote Execution
- Rclone Exfiltration Tool
- Tor Anonymization Tool
Recent claimed victims
- Health Law Advocates (HLA) 2026-07-26
- Stiftung Autismuslink (Autism Link Foundation) 2026-07-24
- Cabin Creek Health Systems (CCHS) 2026-07-23
- Ali-Monde 2026-07-20
- v-silicon.com 2026-07-18
- FAST Logistics Group 2026-07-18
- D.MAG New Material Technology Co., Ltd. Taiwan Giant 2026-07-18
- vedan corp 2026-07-18
- pokka.co 2026-07-18
- Reatile Group 2026-07-18
- V&P Nurseries 2026-07-18
- Kyokuto Kaihatsu Kogyo 2026-07-17
- State Bank of Nauvoo 2026-07-16
- ASA International 2026-07-16
- Golden Glasko & Associates 2026-07-14
- VantagePoint Management & Autoclear 2026-07-14
- tecnocurva.com.br 2026-07-07
- Samberger 2026-07-07
- Aesthetic Surgical Images 2026-07-07
- Oak Park, Michigan, 2026-07-03
- Colorado Rehabilitation and Occupational Medicine 2026-07-02
- Tambasa Atacadistas 2026-07-02
- tricountyhs.org 2026-07-02
- acworth-ga.gov 2026-07-02
- Carvalima Transportes 2026-07-02
Vendor research
- GOLD IONIC DEPLOYS INC RANSOMWARE Counter Threat Unit Research Team
- Threat Alert: INC Ransomware Cybereason Security Research Team
- GOLD IONIC DEPLOYS INC RANSOMWARE Secureworks
- Threat Alert: INC Ransomware Cybereason
- SentinelOne. (n.d.). What Is Inc. Ransomware? SentinelOne
- INC Ransom threatens to leak 3TB of NHS Scotland stolen data Bleeping Computer