INC Ransomware
[INC Ransomware](https://attack.mitre.org/software/S1139) is a ransomware strain that has been used by the [INC Ransom](https://attack.mitre.org/groups/G1032) group since at least 2023 against multiple industry sectors worldwide. [INC Ransomware](https://attack.mitre.org/software/S1139) can employ partial encryption combined with multi-threading to speed encryption.(Citation: SentinelOne INC… Source: MITRE ATT&CK
Activity on Jábega · 12 weeks
1 stories · first seen on 20 Oct 2026 · last seen on 20 Oct 2026
News
- Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFAThe Hacker News · 20 Oct 2026
Appears alongside
MITRE ATT&CK techniques
Initial Access
Execution
Discovery
T1057Process Discovery 3 Sigma rulesT1083File and Directory Discovery 17 Sigma rulesT1120Peripheral Device DiscoveryT1135Network Share Discovery 6 Sigma rulesT1652Device Driver DiscoveryT1680Local Storage Discovery
Lateral Movement
Impact
T1486Data Encrypted for Impact 14 Sigma rulesT1489Service Stop 13 Sigma rulesT1490Inhibit System Recovery 26 Sigma rulesT1491.001Internal Defacement 3 Sigma rules
Stealth
Relationships come from co-occurrence in the news, not attribution. Sources: MISP galaxy, MITRE ATT&CK and SigmaHQ. attack.mitre.org ↗