Inc Ransomware Encryptor Contains Keys to Victim Data Recovery
ID: 2126b6d3-6eb7-5e1b-8583-c5251c30940e
STIX ID: report--2126b6d3-6eb7-5e1b-8583-c5251c30940e
Feed Name: Dark Reading
Threat Score
The Inc ransomware collective disrupted McLaren Health Care, impacting IT and phone systems and forcing downtime procedures; GuidePoint Security's analysis shows Inc's encryptor appends an 80-byte footer that leaks the encryption mode (Fast/Medium/Slow) and other metadata, which can enable partial or full recovery in some cases. The report also highlights a trend of ransomware groups increasingly targeting healthcare organizations previously considered taboo.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.