INC Ransomware Emerges as Major RaaS Threat in 2026 with 830+ Victims Since 2023

INC ransomware has grown into a significant RaaS threat, impacting over 830 organizations since August 2023. The group leverages a combination of established techniques, including credential dumping from Veeam backups and exploitation of vulnerabilities like Citrix Netscaler, to deploy its ransomware. Its evolution, including Rust-based payloads and the emergence of related families like Lynx and Sinobi, highlights the ongoing adaptability of cybercriminal operations, particularly targeting sectors with high operational downtime.