Darkreading INC Ransomware Group Targets Healthcare in Oceania
Article Content
- •INC ransomware group is targeting healthcare and government sectors in Oceania.
- •ACSC and NCSC have issued urgent warnings about the rising ransomware threat.
- •The attacks are ongoing, affecting critical infrastructure in Australia, New Zealand, and Tonga.
The INC ransomware group has launched a series of attacks against healthcare facilities and government agencies across Australia, New Zealand, and Tonga. The Australian Cyber Security Centre (ACSC), National Cyber Security Centre (NCSC), and CERT Tonga have issued warnings about the rising threat posed by these ransomware attacks. The attacks are believed to be executed through affiliate ransomware tactics, which have been increasingly targeting critical infrastructure in the region. The scope of the impact includes emergency clinics and government services, with reports of significant disruptions. While specific numbers of affected systems have not been disclosed, the urgency of the situation has prompted immediate advisories from cybersecurity authorities. As of now, the attacks are ongoing, with no confirmed resolutions reported. Organizations in the affected regions are advised to bolster their cybersecurity measures to mitigate risks.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track INC in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Emerging EDR Killer Tool Targeting Ransomware Groups A new malicious tool, referred to as the EDR killer, is being actively used by at least eight ransomware groups, including Blacksuit and Medusa, to disable endpoint detection and response (EDR) solutions. This tool is believed to be an evolution of the EDRKillShifter developed by RansomHub, which allows ransomware…
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…