Ransomwarehigh
INC Ransomware Emerges as Major RaaS Threat in 2026 with 830+ Victims Since 2023
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-3519 | Unauthenticated RCE in Citrix NetScaler ADC and NetScaler Gateway | 9.8 | 100% | KEVRansomwarePoC | KEV |
| CVE-2023-48788 | Unauthenticated SQL Injection in Fortinet FortiClient EMS | 9.8 | 98% | KEVRansomware | KEV |
| CVE-2024-57727 | Unauthenticated Path Traversal File Download in SimpleHelp 5.5.7 and Earlier | 7.5 | 97% | KEVRansomware | KEV |
| CVE-2025-5777 | Out-of-Bounds Read (Memory Overread) in Citrix NetScaler ADC and Gateway | 9.3 | 100% | KEVRansomware | KEV |
From the original article
2 min read at thehackernews.com
Ravie Lakshmanan Jun 18, 2026 Vulnerability / Enterprise Security Cybersecurity researchers have charted the evolution of INC from an nascent ransomware-as-a-service (RaaS) operation to one of the most prolific cybercrime groups in 2026, claiming no less than 830 victims since August 2023.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.