INC Ransomware Thrives by Mastering the Basics

The INC ransomware group has emerged as a significant threat, particularly thriving through a focus on established ransomware-as-a-service (RaaS) tactics and targeting sectors with high pressure to pay, such as healthcare. The group, active since 2023, has amassed over 800 victims by leveraging basic techniques like spearphishing and exploiting known vulnerabilities, alongside a strategic focus on high-profile targets like NHS Dumfries & Galloway. Their success is attributed to a scalable approach, prioritizing volume over technical innovation, and capitalizing on the disruption caused by other ransomware groups.