Back to Ransomware Database
Ransomware Group

incransom

INC Ransom is a prolific ransomware-as-a-service operation active since July 2023 that systematically targets healthcare, government, education, and manufacturing sectors in North America and Europe, having posted over 200 victims in 2025 alone with no sector off-limits.

830 Known Victims

Threat Level

CRITICAL

Known Infrastructure

The following Tor hidden services have been associated with this group:

  • incbackend.top
  • incapt.blog
  • incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion
  • incbacg6bfwtrlzwdbqc55gsfl763s3twdtwhp27dzuik6s6rwdcityd.onion
  • incbackrlasjesgpfu5brktfjknbqoahe2hhmqfhasc5fb56mtukn4yd.onion

⚠️ Warning: These are malicious sites. Do not visit without proper security measures.

0

Check If You're Affected

Search our database to see if your organization appears in incransom's victim list.

Try It NowFree
Try:|

Get instant threat analysis with risk scores, threat categories, and detailed reports.

Other Active Ransomware Groups

LockbitBlackcatCl0pPlayBianlianAkiraMedusaRhysida