Sinobi — Ransomware Profile
Sinobi is a private vetted-affiliate RaaS group that emerged in mid-2025, believed to be a rebrand of the Lynx/INC ransomware lineage, claiming 176 victims by end of 2025 through double-extortion attacks primarily against mid-market US organizations via compromised SonicWall VPN credentials.
IntelFusions coverage (1)
Tools & malware
- RClone Exfiltration Tool
- Revo Uninstaller Defense Evasion Tool
- Sinobi Ransomware Ransomware
Recent claimed victims
Vendor research
Read the full analysis on IntelFusions