threatintel
actor tracker
IOC pivot
ioc · name

INC-README.txt

RU · RussiaINC Ransomconfidence · high

Ransom note filename dropped per directory by INC Ransom (also seen as INC-README.html / *.inc-readme.txt). Documented in Huntress and Secureworks (GOLD IONIC) analyses.

family
INC Ransomware
first seen
Jul 31, 2023
publisher
Sophos / Secureworks CTU
source citation