Tag: lynx ransomware

2 Attack Reports | 0 Vulnerabilities

Attack reports

Cat's Got Your Files: Lynx Ransomware

A threat actor gained initial access to a network via RDP using compromised credentials, likely obtained through an infostealer, data breach, or initial access broker. They quickly moved laterally to a domain controller, created multiple impersonation accounts with high privileges, and installed An…
ransomware
lateral movement
rdp
backup deletion
data exfiltration
lynx ransomware
credential abuse
2025-11-17
network reconnaissance
Published: November 17, 2025
Downloadable IOCs: 7

Lynx Ransomware: A Rebranding of INC Ransomware

Lynx ransomware, discovered in July 2024, is a successor to INC ransomware targeting organizations in retail, real estate, architecture, and financial services in the U.S. and UK. It shares significant source code with INC and operates as a ransomware-as-a-service model. Lynx employs double extorti…
linux
ransomware
windows
encryption
data leak
raas
double extortion
2024-10-14
lynx ransomware
inc ransomware
Published: October 14, 2024
Downloadable IOCs: 44
Click here to see more Attack Reports