From emerging threat to top-tier ransomware-as-a-service: The evolution of INC ransomware

INC ransomware has rapidly grown into a top-tier ransomware-as-a-service operation by aggressively expanding its affiliate network, rewriting its tooling in Rust for cross-platform attacks, and exploiting the disruption of rival groups to claim over 800 victims—especially in critical U.S. sectors—while its leaked source code fuels the emergence of new ransomware families.