Ransomware - Lynx

Lynx (Active)
Decryptor Available
No
Description

This entry is under construction. However, we have included some details below.

Ransomware Type
Crypto-Ransomware
Data Broker
RaaS
First Seen
Lineage
INC Ransom
Extortion Links
Medium
Link
Clearnet
http://lynxblog.net
TOR
http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd.onion
TOR
http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid.onion
TOR
http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad.onion
TOR
http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad.onion
Extortion Types
Direct Extortion
Double Extortion
Free Data Leaks
Communication
Medium
Identifier
Email
[email protected]
TOR
http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd.onion
TOR
http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad.onion
Encryption
Type
Hybrid
Files
AES
Key
RSA
File Extension
<file name>.<file extension>.LYNX
Ransom Note Name
README.txt
Samples (SHA-256)
eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc
Industry Sector Country Extortion Date Amount (USD)
AgricultureUnited Kingdom
Environmental ServicesUnited States
Real Estate & HousingUnited States
Construction & ArchitectureUnited States
Banking & FinanceCanada
Mining & QuarryingUnited States
AutomotiveUnited Kingdom
Construction & ArchitectureUnited States
AgricultureUnited States
Healthcare & MedicineUnited States
Engineering ServicesUnited Kingdom
HospitalityUnited States
Aerospace & AviationGuatemala
Retail & WholesaleUnited States
Construction & ArchitectureCanada
Professional ServicesUnited Kingdom
ManufacturingUnited States
Oil & GasCanada
Retail & WholesaleAustralia
References & Publications
BleepingComputer: McLaren hospitals disruption linked to INC ransomware attack
Broadcom: Lynx Ransomware
PCrisk: Lynx Ransomware
The Crypto-Ransomware Digest: Lynx Ransomware
Ransomware Tracker