RainINC is a malware family tracked across 1 threat cluster and 3 intelligence report mentions on ThreatCluster. First observed January 22, 2026; most recent activity January 23, 2026.
RainINC is a ransomware family attributed to the INC threat actor group. It has been involved in campaigns targeting U.S. organizations, and recent reporting highlights an opsec slip that enabled data recovery for 12 U.S. orgs, illustrating how operator mistakes can undermine ransomware operations.
An operational security failure by the INC ransomware gang allowed researchers to recover data stolen from twelve U.S. organizations. Cyber Centaurs, a digital forensics firm, discovered the gang's cloud storage…