Threat intelligence / Malware

INC Ransomware

[INC Ransomware](https://attack.mitre.org/software/S1139) is a ransomware strain that has been used by the [INC Ransom](https://attack.mitre.org/groups/G1032) group since at least 2023 against multiple industry sectors worldwide. [INC Ransomware](https://attack.mitre.org/software/S1139) can employ partial encryption combined with multi-threading to speed encryption.(Citation: SentinelOne INC Ransomware)(Citation: Huntress INC Ransom Group August 2023)(Citation: Secureworks GOLD IONIC April 2024)

Malware

TypeMalware

External ID—

First seen2026-08-14

Last seen2026-08-14

Confidence

—

[INC Ransomware](https://attack.mitre.org/software/S1139) is a ransomware strain that has been used by the [INC Ransom](https://attack.mitre.org/groups/G1032) group since at least 2023 against multiple industry sectors worldwide. [INC Ransomware](https://attack.mitre.org/software/S1139) can employ partial encryption combined with multi-threading to speed encryption.(Citation: SentinelOne INC Ransomware)(Citation: Huntress INC Ransom Group August 2023)(Citation: Secureworks GOLD IONIC April 2024)

Labels

malware

16 recorded

Relationships

uses

from INC Ransom

Group

uses

to Data Encrypted for Impact

Technique

uses

to Deobfuscate/Decode Files or Information

Technique

uses

to Device Driver Discovery

Technique

uses

to File and Directory Discovery

Technique

uses

to Inhibit System Recovery

Technique

uses

to Internal Defacement

Technique

uses

to Lateral Tool Transfer

Technique

uses

to Local Storage Discovery

Technique

uses

Technique

uses

to Network Share Discovery

Technique

uses

to Peripheral Device Discovery

Technique

uses

Technique

uses

to Process Discovery

Technique

uses

to Service Stop

Technique

uses

to Windows Management Instrumentation

Technique

4 external

References

mitre-attack

S1139

Secureworks GOLD IONIC April 2024

https://www.secureworks.com/blog/gold-ionic-deploys-inc-ransomware

SentinelOne INC Ransomware

https://www.sentinelone.com/anthology/inc-ransom/

Huntress INC Ransom Group August 2023

https://www.huntress.com/blog/investigating-new-inc-ransom-group-activity