logo

INC ransomware source code selling on hacking forums for $300,000

ID: 34fed719-5c5a-50bf-92ef-5b3588de012f

STIX ID: report--34fed719-5c5a-50bf-92ef-5b3588de012f

Feed Name: Bleeping Computer

Threat Score
75/100

Date Published: 2024-05-13

Date Updated: 2026-04-20

Author: Bill Toulas

...
...

A threat actor using the handle "salfetka" claims to be selling INC Ransom's Windows and Linux/ESXi source code for $300,000 on hacking forums while INC Ransom simultaneously moved to a new leak site; technical details in the sale post match public analyses, the operation lists dozens of victims (including major organizations), and the sale or internal split could increase ransomware proliferation and extortion activity.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.