Lynx ransomware, a newer ransomware-as-a-service (RaaS) that emerged around July may have stemmed from the INC Ransom source code that was reportedly sold in May, according to multiple analyses of the Lynx strain. The Lynx gang maintains both clear web and dark web leak sites and has claimed more than 20 victims since it first appeared, according to analyses by Nextron Systems and Palo Alto Networks’ Unit 42, both published this week.

Source: SC Magazine