incransom
RansomwareVexday analysis
O INC Ransom é uma operação de ransomware-as-a-service ativa desde julho de 2023 que atua de forma sistemática contra os setores de saúde, governo, educação e manufatura na América do Norte e na Europa, tendo publicado mais de 200 vítimas apenas em 2025. No Brasil, a operação possui 9 vítimas conhecidas registradas.
Exploited vulnerabilities
No CVEs attributed to this group in public sources (MITRE ATT&CK). Absence of attribution does not mean absence of activity.
Impact and victims
The group incransom has 14 known ransomware victims. See the most affected sectors and countries and recent victims.
14known victims
14in Brazil
7sectors hit
Activity (12 months)
Most attacked sectors
Manufacturing4
Professional Services4
Retail & E-Commerce2
Transportation1
Agriculture and Food Production1
Technology1
Healthcare1
Most affected countries
🇧🇷 Brasil14
Recent victims
Grupo Caberj
tecnocurva.com.br
ezortea.com.br
carvalima.com.br
tambasa.com
Empresa de Transportes Via Pajuçara Ltda.
DIEHL & CELLA ADVOGADOS ASSOCIADOS
PK PINHÃO & KOIFFMAN ATTORNEYS AT LAW
OAB
Cobra Rolamentos e Autopeças
AFECC - Hospital Santa Rita de Cássia
Sementes Jotabasso
Morar Construtora e Incorporadora LTDA
SCOLARI Srl
incransom uses real techniques and exploits real flaws. TrueHacking's AI Autonomous Pentest simulates these attacks against your infrastructure and brings more security to your application.
Explore the AI Autonomous Pentest →