Ransomware - Lynx

Lynx (Active)
Description

This entry is under construction. However, we have included some details below.

Ransomware Type
Crypto-Ransomware
Data Broker
RaaS
First Seen
Lineage
INC Ransom
Extortion Links
Medio
Enlace
Clearnet
http://lynxblog.net
TOR
http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd.onion
TOR
http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid.onion
TOR
http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad.onion
TOR
http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad.onion
Extortion Types
Direct Extortion
Double Extortion
Free Data Leaks
Communication
Medio
Identificador
Email
[email protected]
TOR
http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd.onion
TOR
http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad.onion
Encryption
Type
Hybrid
Files
AES
Key
RSA
File Extension
<file name>.<file extension>.LYNX
Ransom Note Name
README.txt
Samples (SHA-256)
eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc
Industry Sector País Extortion Date Amount (USD)
Agriculture United Kingdom
Environmental Services United States
Real Estate & Housing United States
Construction & Home Improvement United States
Banking & Finance Canada
Mining & Quarrying United States
Automotive United Kingdom
Construction & Home Improvement United States
Agriculture United States
Healthcare & Medicine United States
Engineering Services United Kingdom
Hospitality & Leisure United States
Aerospace & Aviation Guatemala
Retail & Wholesale United States
Construction & Home Improvement Canada
Professional Services United Kingdom
Manufacturing United States
Oil & Gas Canada
Retail & Wholesale Australia
References & Publications
BleepingComputer: McLaren hospitals disruption linked to INC ransomware attack
Broadcom: Lynx Ransomware
PCrisk: Lynx Ransomware
The Crypto-Ransomware Digest: Lynx Ransomware
Ransomware Tracker