#INCRANSOM
This archive brings together reporting, analysis, and alerts on a ransomware family tracked across the region, with emphasis on its activity, tactics, and potential impact on organizations in Latin America. Readers will find indicators, intrusion patterns, operational changes, and practical signals for security teams, incident responders, and threat intelligence analysts.
INCRANSOM Adds U.S. Victims
Security Arsenal detected 11 new INCRANSOM victims in five days, with cases in the U.S.
Sep 10, 2026 · 4 min
KRYBIT widens its campaign to Colombia
KRYBIT added 14 victims in 24 hours across 9 countries and more than 8 sectors, while CYFIRMA added Colombia and Chile as targets.
Sep 4, 2026 · 4 min
THEGENTLEMEN adds victims in Mexico
Security Arsenal logged 16 THEGENTLEMEN victims in 24 hours, with cases in Mexico, Brazil and Argentina and 31% in Latin America.
Sep 4, 2026 · 2 min