INC Ransomware Uses Rust-Based Windows and Linux/ESXi Encryptors in New Attacks

INC Ransomware Climbs Into Top Tier of Cybercrime Operations, Surpasses 830 Victims

The ransomware operation known as INC has grown into one of the most active cybercrime groups of 2026, with security researchers linking it to more than 830 victims since it first appeared in August 2023. According to researchers at Acronis, the group’s rise coincided with disruptions affecting major ransomware brands such as LockBit and BlackCat. As affiliates sought alternative platforms, INC appears to have benefited from that shift. More tha…

INC Ransomware Uses Rust-Based Windows and Linux/ESXi Encryptors in New Attacks

INC ransomware has grown from a newcomer threat into one of the most dangerous ransomware operations worldwide. What began as an emerging criminal group in mid-2023 has claimed over 800 victims globally, placing it among the top ransomware groups this year. The group runs under a Ransomware-as-a-Service model, recruiting affiliates and supplying them with ready-built tools to carry out attacks at scale. The threat has evolved through a steady st…