INC Ransomware
INC Ransomware is a cybercrime syndicate with a financial motive, tracked by Brandefense. It targets 6 sectors, including Government and Manufacturing. It uses 6 MITRE ATT&CK techniques.
Also known as
- Tarnished Scorpius
- Techniques
- 6
- Exploited CVEs
- No CVE data
- Record updated
Who They Target.
How They Operate · MITRE ATT&CK.
6 techniques across 5 of 14 tacticsReconnaissance·
Resource Development·
Execution·
Persistence·
Privilege Escalation·
Defense Evasion1
T1562.001
Impair Defenses: Disable or Modify Tools
Impair Defenses: Disable or Modify Tools
Credential Access1
T1003
OS Credential Dumping
OS Credential Dumping
Discovery1
T1087
Account Discovery
Account Discovery
Lateral Movement·
Collection·
Command and Control·
Exfiltration·
Impact1
T1486
Data Encrypted for Impact
Data Encrypted for Impact
Vulnerabilities Linked To Their Tools.
Browse Vulnerability Intelligence →Arsenal · Malware And Tools.
- Qilinmalware
- Settramalware
- BloodHoundtool
- Cobalt Striketool
- SharpHoundtool
Last updated Oct 21, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.