S1139 INC Ransomware

malwareEnterprise

platformsWindows

also known asINC Ransomware

INC Ransomware is a ransomware strain that has been used by the INC Ransom group since at least 2023 against multiple industry sectors worldwide. INC Ransomware can employ partial encryption combined with multi-threading to speed encryption.

techniques used (15)

ATT&CK techniques this enables or maps to.

T1047Windows Management Instrumentation
T1057Process Discovery
T1083File and Directory Discovery
T1106Native API
T1120Peripheral Device Discovery
T1135Network Share Discovery
T1140Deobfuscate/Decode Files or Information
T1486Data Encrypted for Impact
T1489Service Stop
T1490Inhibit System Recovery
T1491.001Internal Defacement
T1566Phishing
T1570Lateral Tool Transfer
T1652Device Driver Discovery
T1680Local Storage Discovery

used by groups (1)

Threat groups associated with this.

G1032INC Ransom

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan