lynx

Ransomware
Sourceransomware.live

Vexday analysis

Lynx é uma operação de ransomware como serviço (RaaS) surgida em meados de 2024, resultado da reformulação do INC Ransomware — cujo código-fonte foi vendido por US$ 300.000 no fórum RAMP. A operação reivindica cerca de 300 vítimas nos setores de manufatura, serviços empresariais, tecnologia e transporte, adotando um modelo de divisão de lucros de 80/20 com seus afiliados. No Brasil, são registradas 4 vítimas associadas ao grupo.

Exploited vulnerabilities

No CVEs attributed to this group in public sources (MITRE ATT&CK). Absence of attribution does not mean absence of activity.

Impact and victims

The group lynx has 4 known ransomware victims. See the most affected sectors and countries and recent victims.

4known victims
4in Brazil
2sectors hit
Most attacked sectors
Professional Services3
Manufacturing1
Most affected countries
🇧🇷 Brasil4
Recent victims
cibracoProfessional Services · BR · 2025-08-05
accountant falavinha.localProfessional Services · BR · 2025-06-10
GRECA Asfaltos (grupogreca.com.br)Manufacturing · BR · 2025-06-04
BeCleverProfessional Services · BR · 2024-10-24

lynx uses real techniques and exploits real flaws. TrueHacking's AI Autonomous Pentest simulates these attacks against your infrastructure and brings more security to your application.

Explore the AI Autonomous Pentest →