INC Ransom’s Franchise Model Is Putting Critical Infrastructure on the Chopping Block

The ACSC advisory profiles INC Ransom, a Ransomware-as-a-Service operation whose affiliate model has enabled large-scale ransomware and data-extortion campaigns targeting healthcare and other critical sectors worldwide; affiliates exploit known, unpatched vulnerabilities (several CVEs cited), perform privilege escalation and lateral movement, exfiltrate data (published to a leak site), and apply double-extortion tactics, with recommendations to prioritize patching, phishing-resistant MFA, network segmentation, and monitoring of administrative tool usage.