Ransomware
INC RansomINC RansomwareLynx (assessed rebrand)
Attribution
RaaS (financially motivated, unattributed)
Motivation
Financially motivated (ransomware)
Attribution confidence
medium
MENA targeting
Saudi Arabia, UAE
Sectors
Energy, chemicals, training, logistics, facilities, legal services
Corpus activity · 6mo1 mention
Sourced from leak-site trackers — reflects the group's claim of a victim, not a confirmed breach.
Why it mattersRansomware actor, medium confidence, documented targeting Saudi Arabia, UAE (Energy, chemicals, training sectors).
What's nextNo pipeline reports reference this actor yet — Radar mentions may still surface early signal.
No open hunts or recent alerts tracked against this actor right now.