Threat Actor Selling INC Ransom Source Code for $300,000

Threat Actor: INC Ransomware Group | INC Ransomware Group
Victim: N/A
Price: $300,000
Exfiltrated Data Type: N/A

Additional Information:

  • The INC Ransomware Group is selling the source code for their “inc ransom” encryption ransomware.
  • The source code includes the AES-CTR-128 and Curve25519-Donna encryption algorithms, as well as the panel source code.
  • The ransomware can operate on both Windows and Linux operating systems using the IOCP infrastructure.
  • Specially compiled versions for ESXi and other popular virtualization platforms are also available.
  • The software’s user interface is developed using React, while the backend is built with Node.js and TypeScript.
  • All components are packaged in Docker containers and can be easily deployed.
  • This sale raises concerns about the potential increase in ransomware attacks.
  • Dark web researchers warn that source code auctions like this could contribute to the spread of cybercrime.
  • The timing of this sale, following the clash between Lockbit and NCA, is surprising.

According to recent announcment, a group of hackers has taken action to sell “inc ransom” encryption ransomware source code. This sale includes the AES-CTR-128, Curve25519-Donna encryption algorithms and panel source code. This ransomware operate on both Windows and Linux operating systems using the IOCP infrastructure. Additionally, there are specially compiled versions for ESXi and other popular virtualization platforms.

Allegedly, while the user interface of the software is developed using React, the backend is built with Node.js and TypeScript. All components are packaged in Docker containers and can be deployed with a single command.

This situation raises concerns about ransomware attacks. It is predicted that in the coming days, new variants from the INC Ransomware group will emerge, increasing their attacks. Daily dark web researchers warn that such source code auctions could contribute to the spread of cybercrime. The timing of this sale, coming after the clash between Lockbit and NCA, is also surprising.

Additional, The price for this source code is set at $300,000.

Original Source: https://dailydarkweb.net/source-code-sale-a-threat-actor-offers-inc-ransom-source-code-for-sale-at-300000/