INC Ransom is a prolific ransomware-as-a-service operation active since July 2023 that systematically targets healthcare, government, education, and manufacturing sectors in North America and Europe, having posted over 200 victims in 2025 alone with no sector off-limits.
Genera un perfil del actor con IA (defensivo) cuando lo pidas.
Este grupo no tiene TTPs curadas. Puedes generar un mapeo MITRE ESTIMADO por IA (no confirmado) a partir de su descripción/notas, solo cuando lo pidas.
Firma de detección defensiva para este grupo (úsala en tu EDR/SIEM). Fuente: ransomware.live.
/*
Inc. ransomware
*/
rule Inc
{
meta:
author = "rivitna"
family = "ransomware.inc"
description = "Inc. ransomware Windows payload"
severity = 10
score = 100
strings:
$h0 = { 6A 00 6A 00 6A 18 8D [3-4] 5? 68 28 C0 53 00 }
$h1 = { 6A 00 68 80 00 00 00 6A 03 6A 00 6A 03 [0-16] 68 9F 01 12 00
[0-8] C7 44 24 ?? 2E 00 5C 00 }
$h2 = { 6A 20 FF 35 [4] FF 15 [8-12] 8A 4? 1F 80 2? F8 24 3F 0C 40
88 4? 1F }
$s0 = "\x00Q:\\\x00W:\\\x00E:\\\x00R:\\\x00T:\\\x00Y:\\\x00U:\\" wide
$s1 = "PGh0bWw+DQoJPGhlYWQ+DQoJCTx0aXRsZT5JbmMuIFJhbnNvbXdhcmU8" ascii
$s2 = "\\background-image.jpg\x00" wide
$s3 = "\x00--lhd\x00" wide
$s4 = "\x00--ens\x00" wide
$s5 = "\x00--sup\x00" wide
$s6 = " delete shadow copies from %c:/ " wide
$s7 = "\x00[+] Start encryption of" wide
$s8 = "[+] Encrypting: %s\n" wide
$s9 = "[+] Found drive: %s" wide
$s10 = " [+] Mounted %s\n" wide
$s11 = " [-] Failed to mount %s Error: %d\n" wide
$s12 = "[*] Count of arguments: %d\n" wide
$s13 = "[-] Please, add \"/\" to the end of directory!\n" wide
$s14 = "[*] Settings:\n" wide
$s15 = " [%s] Stop using process\n" wide
$s16 = " [%s] Encrypt network shares\n" wide
$s17 = " [%s] Load hidden drives\n\n" wide
$s18 = "[*] Loading hidden drives...\n" wide
$s19 = "[*] Starting full encryption in 5s" wide
$s20 = "[+] Start sending note to printers...\n" ascii
$s21 = "[+] Count of printers: %d\n" ascii
condition:
((uint16(0) == 0x5A4D) and (uint32(uint32(0x3C)) == 0x00004550)) and
(
(7 of ($s*)) or
((1 of ($h*)) and (3 of ($s*)))
)
}
Benchmark Civil Engineering Services, Inc. is a civil engineering firm based in Allentown, PA, specializing in civil engineering, traffic studies, forensic engineering, and land surveying. The company serves municipalities and clients in the Lehigh Valley and surrounding areas, providing expert services in traffic and transportation engineering, land development, and construction engineering. With a focus on professionalism and integrity, Benchmark is committed to guiding clients through the design, approval, and construction processes. Their highly trained staff utilizes state-of-the-art technology to ensure project success and compliance with regulations.
| Organización | País | Sector | Grupo | Descubierta |
|---|---|---|---|---|
| BENCIVIL | US | Professional Services | — | 27 ago 2026 |
| Rohloff Group | ZA | Manufacturing | — | 27 ago 2026 |
| Ruby Seven Studios | US | Technology | — | 27 ago 2026 |
| el-group | CH | Other | — | 22 ago 2026 |
| BANGKOKCABLE | TH | Manufacturing | — | 19 ago 2026 |
| UNIPLASTICS.COM | US | Manufacturing | — | 19 ago 2026 |
| CDGARVINLAW | US | Professional Services | — | 19 ago 2026 |
| EXEL | CA | Technology | — | 19 ago 2026 |
| SpearFin Ltd | MU | Financial Services | — | 18 ago 2026 |
| ssf-int.com ssf-ing.de | DE | Professional Services | — | 18 ago 2026 |
| nyklawfirm.com nyk.ae | AE | Professional Services | — | 18 ago 2026 |
| SD Associates Sdn Bhd | MY | Not Found | — | 18 ago 2026 |
| Third Coast Bancshares | US | Financial Services | — | 18 ago 2026 |
| Lansing Urgent Care | US | Healthcare | — | 17 ago 2026 |
| https://pacific-construction.com/ | GB | Manufacturing | — | 13 ago 2026 |
| cambrialawfirm.com | CA | Professional Services | — | 13 ago 2026 |
| clgroup | US | Professional Services | — | 13 ago 2026 |
| gamaus.com | US | Technology | — | 12 ago 2026 |
| BEDC.COM.AU | AU | Energy & Utilities | — | 12 ago 2026 |
| diabetesandmetabolism.com | US | Healthcare | — | 12 ago 2026 |
| stuartandassociates.com | US | Professional Services | — | 12 ago 2026 |
| Louisville Bar Association | US | Professional Services | — | 8 ago 2026 |
| ATMS | IN | Transportation | — | 7 ago 2026 |
| vprj.org | US | Not Found | — | 5 ago 2026 |
| lantisnet.com | US | Technology | — | 5 ago 2026 |
| Loyalist College | CA | Education | — | 4 ago 2026 |
| TRULITE GLASS & ALUMINUM SOLUTIONS | US | Manufacturing | — | 4 ago 2026 |
| pushidrosal.id | ID | Other | — | 4 ago 2026 |
| lccgroup.com | PH | Professional Services | — | 4 ago 2026 |
| https://geleximco.vn/ | VN | Manufacturing | — | 4 ago 2026 |
| clintonhealthaccess.org | US | Healthcare | — | 4 ago 2026 |
| Oleoductos del Valle | AR | Energy & Utilities | — | 4 ago 2026 |
| ecfa.org | US | Professional Services | — | 2 ago 2026 |
| quantinuum.com | US | Technology | — | 1 ago 2026 |
| PARTNERED HEALTH GROUP | AU | Healthcare | — | 30 jul 2026 |
| sslf.local | US | Not Found | — | 30 jul 2026 |
| harwal.net | AE | Not Found | — | 29 jul 2026 |
| https://eclmn.com/ | US | Healthcare | — | 28 jul 2026 |
| Della Casa Group AG | CH | Other | — | 28 jul 2026 |
| minigrip.com.mx | MX | Manufacturing | — | 28 jul 2026 |
| DUCON | CO | Manufacturing | — | 28 jul 2026 |
| foundationstofreedom.org | US | Other | — | 28 jul 2026 |
| takethehop.com | US | Hospitality | — | 27 jul 2026 |
| healthlawadvocates.org | US | Professional Services | — | 26 jul 2026 |
| autismuslink.ch | CH | Healthcare | — | 24 jul 2026 |
| cabincreekhealth.com | US | Healthcare | — | 23 jul 2026 |
| Ali-Monde | US | Agriculture and Food Production | — | 20 jul 2026 |
| v-silicon.com | CN | Technology | — | 18 jul 2026 |
| FAST.COM.PH | PH | Technology | — | 18 jul 2026 |
| D.MAG New Material Technology Co., Ltd. Taiwan Giant | TW | Manufacturing | — | 18 jul 2026 |
| vedan corp | VN | Agriculture and Food Production | — | 18 jul 2026 |
| reatile.co.za | ZA | Professional Services | — | 18 jul 2026 |
| V&P Nurseries | US | Agriculture and Food Production | — | 18 jul 2026 |
| Kyokuto Kaihatsu Kogyo | JP | Manufacturing | — | 17 jul 2026 |
| asa-international.com | NL | Business Services | — | 16 jul 2026 |
| https://www.statebankofnauvoo.com/ | US | Financial Services | — | 16 jul 2026 |
| Golden Glasko & Associates | US | Business Services | — | 14 jul 2026 |
| VantagePoint Management & Autoclear | US | Financial Services | — | 14 jul 2026 |
| Aesthetic Surgical Images | US | Healthcare | — | 7 jul 2026 |
| tecnocurva.com.br | BR | Technology | — | 7 jul 2026 |
| samberger24.de | DE | Business Services | — | 7 jul 2026 |
| oakparkmi.gov | US | Public Sector | — | 3 jul 2026 |
| tambasa.com | BR | Retail & E-Commerce | — | 2 jul 2026 |
| tricountyhs.org | US | Education | — | 2 jul 2026 |
| acworth-ga.gov | US | Public Sector | — | 2 jul 2026 |
| carvalima.com.br | BR | Professional Services | — | 2 jul 2026 |
| ezortea.com.br | BR | Retail & E-Commerce | — | 2 jul 2026 |
| hamilton-eye.com | US | Healthcare | — | 2 jul 2026 |
| Colorado Rehabilitation and Occupational Medicine | US | Healthcare | — | 2 jul 2026 |
| https://www.roundshield.com/ | GB | Business Services | — | 1 jul 2026 |
| horizoneye.com | US | Technology | — | 1 jul 2026 |
| https://sza.it/ | IT | Not Found | — | 30 jun 2026 |
| GDN AR(Dorinka) | AR | Other | — | 29 jun 2026 |
| callhorton.com | US | Business Services | — | 26 jun 2026 |
| johndufourlaw.com | US | Business Services | — | 26 jun 2026 |
| theswansonlawgroup.com | US | Business Services | — | 26 jun 2026 |
| Life Bridges | US | Healthcare | — | 25 jun 2026 |
| GSP Crop Science Pvt | IN | Agriculture and Food Production | — | 25 jun 2026 |
| belpointeasset.com \ belpointe.com | US | Financial Services | — | 22 jun 2026 |
| jktornel | MX | Not Found | — | 21 jun 2026 |
| Newspaper Media Group | US | Consumer Services | — | 20 jun 2026 |
| Horizon Family Medical Group | US | Healthcare | — | 18 jun 2026 |
| neuwoges.de | DE | Not Found | — | 18 jun 2026 |
| jasperplastics.info | US | Manufacturing | — | 16 jun 2026 |
| framesiprofessional.com | US | Business Services | — | 16 jun 2026 |
| smithassociatescpa.com | US | Business Services | — | 15 jun 2026 |
| Kewaunee Scientific | US | Manufacturing | — | 11 jun 2026 |
| Signazon_USA | US | Technology | — | 11 jun 2026 |
| DISCOLABINDU | FR | Not Found | — | 11 jun 2026 |
| fineconsulting | RO | Business Services | — | 11 jun 2026 |
| FIZA | CZ | Not Found | — | 10 jun 2026 |
| kelmreuter.com | US | Business Services | — | 6 jun 2026 |
| obrieneng.com | US | Construction | — | 5 jun 2026 |
| Stuga Machinery | GB | Manufacturing | — | 4 jun 2026 |
| pdcbodynits | SG | Not Found | — | 4 jun 2026 |
| CUSTOMSIGN | US | Business Services | — | 4 jun 2026 |
| Colina Financial Advisors | BS | Financial Services | — | 3 jun 2026 |
| Oztugotomotiv | TR | Manufacturing | — | 3 jun 2026 |
| trrac.net | US | Transportation/Logistics | — | 2 jun 2026 |
| Bradley law firm | US | Business Services | — | 1 jun 2026 |
| Champaign-Urbana Public Health District | US | Public Sector | — | 1 jun 2026 |
| www.labexpress.com | US | Business Services | — | 30 may 2026 |
| belimed.com | US | Healthcare | — | 29 may 2026 |
| lawants | ES | Business Services | — | 28 may 2026 |
| sanver.com.mx | MX | Professional Services | — | 5 may 2026 |
| Empresa de Transportes Via Pajuçara Ltda. | BR | Transportation | — | 27 feb 2026 |
| www.pucobre.cl | CL | Energy & Utilities | — | 2 feb 2026 |
| PK PINHÃO & KOIFFMAN ATTORNEYS AT LAW | BR | Professional Services | — | 30 ene 2026 |
| DIEHL & CELLA ADVOGADOS ASSOCIADOS | BR | Professional Services | — | 30 ene 2026 |
| OAB | BR | Professional Services | — | 23 ene 2026 |
| latamlex (gyg.local) | CR | Professional Services | — | 12 nov 2025 |
| Grupo Via Argentina | AR | Transportation | — | 12 nov 2025 |
| Vitalmex | MX | Healthcare | — | 3 nov 2025 |
| DILOSA FOOD COMPANIES | SV | Agriculture and Food Production | — | 29 oct 2025 |
| Cobra Rolamentos e Autopeças | BR | Manufacturing | — | 5 oct 2025 |
| Manjarrez Impresores | MX | Professional Services | — | 29 sept 2025 |
| Republica De Panama | PA | Government & Defense | — | 9 sept 2025 |
| BDO Perú | PE | Financial Services | — | 29 ago 2025 |
| Manesa | MX | Manufacturing | — | 29 ago 2025 |
| Quadrangle Imaging Center | PR | Healthcare | — | 22 ago 2025 |
| www.lincecomercial.com | CO | Technology | — | 24 jul 2025 |
| Sementes Jotabasso | BR | Agriculture and Food Production | — | 23 jul 2025 |
| National Institute of Water Resources | DO | Government & Defense | — | 14 jul 2025 |
| Fund for Reformed Companies (FONPER) | DO | Financial Services | — | 25 jun 2025 |
| AFECC - Hospital Santa Rita de Cássia | BR | Healthcare | — | 19 jun 2025 |
| Morar Construtora e Incorporadora LTDA | BR | Manufacturing | — | 19 jun 2025 |
| iscamen | AR | Agriculture and Food Production | — | 5 jun 2025 |
| Universidad Técnica del Norte Ecuador | EC | Education | — | 1 jun 2025 |
| Boombah Inc. | DO | Manufacturing | — | 9 ago 2024 |
| Ejército del Per | PE | Government & Defense | — | 25 mar 2024 |
| SCOLARI Srl | BR | Manufacturing | — | 17 nov 2023 |
Las direcciones de los sitios de filtración (.onion) se conocen pero no se publican ni se enlazan. Solo se muestran metadatos públicos. ética
KFC Rohloff Group franchise partner Total leak: 536 GB, 103,196 Files, 30,805 Folders Data: Employees personal , Loan applications, Employees banking details, ID's, Bank account statements, Employees ACKNOWLEDGEMENT OF DEBT, RESULT OF THE DISCIPLINARY HEARING, Financial documentation for royalties, Food Cost Reconciliation and a lot of other documentation. Data type: Confidential Full publication coming soon.
Ruby Seven Studios Inc. [enlace omitido] Total leak: 114 GB (123,463,823,360 bytes), 133,851 Files, 49,357 Folders. Data: Source code, Games Rules, Game assets, Game math, GDD, IGT, Analytics report Finance doc's, Royalty Reports, Tax invoice, Inventions Agreement - Employee intellectual property assignment, non competition and confidentiality agreement Personal ID/Passport, Share holders list. Data type: Confifential Partners: IGT (International Game Technology), Konami Gaming, Wazdan, Bluberi Gaming, CHAYOWO TECHNOLOGY, Everi & Aristocrat Bally's Corporation, Delaware North Gaming, Pechanga Resort & Casino, Mystic Lake Casino Hotel, Affinity Interactive, Choctaw Casinos & Resorts. Full publication coming soon.
Unauthorized access has been gained to the company's confidential files, including client data, proprietary R&D, and financial documentation.
About Bangkok Cable Bangkok Cable is Thailand's leading manufacturer of electric wires and cables, boasting over five decades of sustainable growth. The company is committed to connecting people with power and driving economic development through innovative manufacturing technologies. With a production capacity of 30,000 metric tons per year for copper and 15,000 metric tons for aluminum cables, Bangkok Cable adheres to high-quality standards and sustainable practices. Their products serve a wide range of clients, contributing to the country's development and enhancing the quality of life through reliable electrical power.
Universal Plastics Inc. is a family-owned commercial specialty subcontractor with over 50 years of experience, specializing in custom wall panel systems, wall protection, and high-impact wall coverings. They serve a diverse clientele, including commercial projects such as airports and medical facilities, providing innovative solutions with materials like FRP, stainless steel, and plastic laminates. As a master distributor for Marlite in Northern California, they also offer a wide range of products including solid surfaces and decorative wall panels. Their commitment to quality and customer service makes them a leader in the industry.