Lynx ransomware behind Electrica energy supplier cyberattack

Romania's National Cyber Security Directorate (DNSC) attributes an ongoing ransomware breach of major electricity supplier Electrica Group to the Lynx ransomware gang, noting critical power supply systems remain operational; DNSC released a YARA rule to help detect the encryptor. The report links Lynx to INC Ransom (a RaaS) and describes its recent targeting of energy, utility, and other sectors since mid-2024.