← Back to Actors
INC Ransom
INC RansomGOLD IONIC
[INC Ransom](https://attack.mitre.org/groups/G1032) is a ransomware and data extortion threat group associated with the deployment of [INC Ransomware](https://attack.mitre.org/software/S1139) that has been active since at least July 2023. [INC Ransom](https://attack.mitre.org/groups/G1032) has targeted organizations worldwide most commonly in the industrial, healthcare, and education sectors in the US and Europe.(Citation: Bleeping Computer INC Ransomware March 2024)(Citation: Cybereason INC Ransomware November 2023)(Citation: Secureworks GOLD IONIC April 2024)(Citation: SentinelOne INC Ranso...
26
Techniques
26
Covered
0
Gaps
100%
Coverage
Coverage26/26
COVERED (26)
T1021.001Remote Desktop Protocol54 det.T1036.005Match Legitimate Resource Name or Location45 det.T1046Network Service Discovery52 det.T1047Windows Management Instrumentation88 det.T1049System Network Connections Discovery23 det.T1059.003Windows Command Shell87 det.T1069.002Domain Groups45 det.T1070.004File Deletion45 det.T1071Application Layer Protocol116 det.T1074Data Staged12 det.T1078Valid Accounts306 det.T1087.002Domain Account58 det.T1105Ingress Tool Transfer191 det.T1135Network Share Discovery20 det.T1190Exploit Public-Facing Application233 det.T1219Remote Access Tools46 det.T1486Data Encrypted for Impact394 det.T1537Transfer Data to Cloud Account27 det.T1560.001Archive via Utility27 det.T1562.001Disable or Modify Tools325 det.T1566Phishing1192 det.T1569.002Service Execution65 det.T1570Lateral Tool Transfer23 det.T1588.002Tool13 det.T1657Financial Theft15 det.T1685Disable or Modify Tools281 det.