INC Ransomware

Search everything

Mentions · 7d1
Mentions · 30d1
All mentions2
First seenSep 3, 2026
Last mentioned4d ago

Timeline

2 articles · newest first

Ransomware affiliates using Claude left chats and tools exposed

SOCRadar found 46 INC encryptor builds, notes on 62 organizations, and more than $23,920 in recorded AI spend.

Cyber Security NewsOct 21, 11:49 UTC · 4d agoRansomwareCVE-2026-35616 CVE-2024-57727 CVE-2026-419406 · 4 reads

Attackers exploit zero-days in consistently besieged SonicWall product

Two actively exploited SonicWall SMA 1000 zero-days chain to unauthenticated RCE; patches released and CISA added both to KEV.

CyberScoopSep 3, 22:12 UTC · Sep 3, 2026Exploit / PoCExploitedCVE-2026-83548 CVE-2026-835492 · 1 read

Related CVEs

by mentions

CVE-2026-835488%10.0
Pre-Authentication SSRF in SonicWall SMA1000 Appliance Workplace Interface
published Sep 1, 2026SonicWall SMA1000 appliance Workplace interfaceKEVPoC ×3
CVE-2026-3561694%9.8
Unauthenticated Code Execution in Fortinet FortiClient EMS 7.4.5–7.4.6
published Apr 4, 2026Fortinet FortiClient EMSKEVPoC
CVE-2026-4194099%9.3
Missing-Authentication Bypass in WebPros cPanel & WHM (AuthBypass to RCE)
published Apr 29, 2026WebPros cPanelKEVRansomwarePoC ×9
CVE-2026-8354910%7.8
Authenticated OS Command Injection RCE in SonicWall SMA1000 Appliance Console
published Sep 1, 2026SonicWall SMA1000 series appliances - Appliance Management Console (AMC)KEV
CVE-2024-5772797%7.5
Unauthenticated Path Traversal File Download in SimpleHelp 5.5.7 and Earlier
published Jan 15, 2025SimpleHelp (remote support/remote access software)KEVRansomware

Appears with

CISAorganization · 2
Kimi K3ai model · 1
FortiClient EMSproduct · 1
cPanelvendor · 1
Fortinetvendor · 1
Akirathreat actor · 1
The Gentlementhreat actor · 1
SonicWallvendor · 1
RevSocksmalware · 1
SOCRadarorganization · 1
SonicWall SMA 1000product · 1
Huntressvendor · 1
OpenCodeproduct · 1
INCmalware · 1
SonicWall customersvictim · 1
Claude Opus 4.6ai model · 1

Entities are extracted by the model from each article. First seen Sep 3, 2026, last mentioned 4d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.