Back to Ransomware Database
Ransomware Group
lynx
Lynx is a ransomware-as-a-service operation that emerged in mid-2024 as a rebrand of INC Ransomware (whose source code was sold for $300,000 on the RAMP forum), claiming ~300 victims across manufacturing, business services, technology, and transportation with an 80/20 profit split for affiliates.
Known victims417
Threat Level
HIGH
Tactics, Techniques & Procedures (TTPs)
DiscoveryEnum
- SoftPerfect NetScan
Exfiltration
- Restic
Check If You’re Affected
Search our database to see if your organization appears in lynx’s victim list.
Try it nowFree⌘K
Try
risk score · threat categories · sources · age · confidence — in one request