incransom

Ransomware

Sourceransomware.live

Vexday analysis

O INC Ransom é uma operação de ransomware-as-a-service ativa desde julho de 2023 que atua de forma sistemática contra os setores de saúde, governo, educação e manufatura na América do Norte e na Europa, tendo publicado mais de 200 vítimas apenas em 2025. No Brasil, a operação possui 9 vítimas conhecidas registradas.

Exploited vulnerabilities

No CVEs attributed to this group in public sources (MITRE ATT&CK). Absence of attribution does not mean absence of activity.

Impact and victims

The group incransom has 13 known ransomware victims. See the most affected sectors and countries and recent victims.

13known victims

13in Brazil

7sectors hit

Activity (12 months)

Most attacked sectors

Professional Services4

Manufacturing3

Retail & E-Commerce2

Technology1

Transportation1

Healthcare1

Agriculture and Food Production1

Most affected countries

🇧🇷 Brasil13

Recent victims

tecnocurva.com.brTechnology · BR · 2026-07-06

tambasa.comRetail & E-Commerce · BR · 2026-07-01

carvalima.com.brProfessional Services · BR · 2026-07-01

ezortea.com.brRetail & E-Commerce · BR · 2026-07-01

Empresa de Transportes Via Pajuçara Ltda.Transportation · BR · 2026-02-26

PK PINHÃO & KOIFFMAN ATTORNEYS AT LAWProfessional Services · BR · 2026-01-30

DIEHL & CELLA ADVOGADOS ASSOCIADOSProfessional Services · BR · 2026-01-30

OABProfessional Services · BR · 2026-01-23

Cobra Rolamentos e AutopeçasManufacturing · BR · 2025-10-05

AFECC - Hospital Santa Rita de CássiaHealthcare · BR · 2025-06-19

Sementes JotabassoAgriculture and Food Production · BR · 2025-06-15

Morar Construtora e Incorporadora LTDAManufacturing · BR · 2025-05-15

SCOLARI SrlManufacturing · BR · 2023-11-15

incransom uses real techniques and exploits real flaws. TrueHacking's AI Autonomous Pentest simulates these attacks against your infrastructure and brings more security to your application.

Explore the AI Autonomous Pentest →