SecuriTricks - data leak site

From emerging threat to top-tier ransomware-as-a-service: The evolution of INC ransomware

INC has evolved from an emerging ransomware-as-a-service operation into one of the most active groups in 2026, claiming over 800 victims since 2023. The disruption of LockBit and BlackCat's shutdown created opportunities for INC to expand as affiliates migrated. Both Windows and Linux/ESXi encrypto…

cobalt strike

encryption

ransomware-as-a-service

veeam-credential-dumping

vmware-esxi

Published: June 17, 2026

Linked vulnerabilities : CVE-2024-57727 (CVSS 7.5), CVE-2023-3519, CVE-2023-48788, CVE-2025-5777 (CVSS 9.3)

Downloadable IOCs: 22

GUNRA RANSOMWARE: What You Don't Know!

Gunra Ransomware is a double extortion group targeting global victims, excluding the US. They primarily attack Windows systems, recently expanding to Linux. The group uses phishing as their main vector and negotiates through a WhatsApp-themed chat panel. They can encrypt large files quickly using a…

Published: September 24, 2025

Downloadable IOCs: 0

KAWA4096’s Ransomware Tide: Rising Threat With Borrowed Styles

KAWA4096, a new ransomware that emerged in June 2025, has claimed at least 11 victims, primarily targeting the United States and Japan. The malware features a leak site mimicking the Akira ransomware group's style and a ransom note format similar to Qilin's. KAWA4096 employs multithreading, semapho…

Published: July 18, 2025

Downloadable IOCs: 0

Tag: data leak site

Attack reports

From emerging threat to top-tier ransomware-as-a-service: The evolution of INC ransomware

GUNRA RANSOMWARE: What You Don't Know!

KAWA4096’s Ransomware Tide: Rising Threat With Borrowed Styles