Threat actor · G1032

INC Ransom

Also known as GOLD IONIC.

INC Ransom is a ransomware and data extortion threat group associated with the deployment of INC Ransomware that has been active since at least July 2023. INC Ransom has targeted organizations worldwide most commonly in the industrial, healthcare, and education sectors in the US and Europe.

ATT&CK techniques

25 mapped

T1021.001 T1036.005 T1046 T1047 T1049 T1059.003 T1069.002 T1070.004 T1071 T1074 T1078 T1087.002 T1105 T1135 T1190 T1219 T1486 T1537 T1560.001 T1566 T1569.002 T1570 T1588.002 T1657 T1685