INC Ransomware llama por teléfono a víctimas tras explotar fallas críticas en SonicWall — Colombia entre los países afectados

Ciberseguridadlatam •Redacción CSL • August 6, 2026

El grupo INC Ransomware explotó dos vulnerabilidades en dispositivos SonicWall SMA 1000 y agregó una táctica poco común: llamar directamente a las víctimas para presionarlas durante el proceso de extorsión. La campaña afectó a organizaciones en cinco países, incluida Colombia. Qué pasó Resecurity reportó que INC Ransomware comenzó a explotar las vulnerabilidades CVE-2026-15409 y CVE-2026-15410 […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

INC Ransomware Exploits SonicWall Vulnerabilities, Calls Victims Directly The INC Ransomware group has exploited two critical vulnerabilities in SonicWall devices, specifically CVE-2026-15409 and CVE-2026-15410, affecting organizations in 71 countries, including Colombia. This campaign began three weeks prior to the patch release on July 14, 2026, and has reportedly impacted nearly 900 victims. Notably, INC Ransomware employed a unique tactic by calling victims directly to pressure them during extortion efforts. The vulnerabilities were publicly disclosed and patched by SonicWall, but active exploitation was confirmed to have started at least three weeks earlier. The attack vector primarily targeted SonicWall SMA 1000 devices, which are widely used in various sectors. The situation remains critical as organizations are urged to ensure their systems are updated to mitigate risks. 3 sources 70

Extracted Entities

INC Ransomware llama por teléfono a víctimas tras explotar fallas críticas en SonicWall — Colombia entre los países afectados

The full story

Extracted Entities

Attack Types (1)

Countries (1)

CVEs (2)

Platforms (1)

Ransomware Groups (1)