Linkc is a ransomware group that first appeared in January 2025, operating a Tor-based data leak site to execute double-extortion attacks for financial gain. The group distinguishes itself by its focused targeting of US-based entities in the artificial intelligence, cloud computing, aerospace, and manufacturing sectors, specifically aiming to exfiltrate highly sensitive intellectual property such as AI model source code, driverless system blueprints, and customer datasets. This specialized targeting, coupled with ransom demands as high as $15 million, underscores their intent to monetize critical organizational data and intellectual property rather than merely disrupting operations. There is no indication that Linkc operates under multiple names, but it should not be confused with Lynx ransomware, a distinct group.

Aliases del actor

bisonaltontotontoteamAPT CARETOAPT RANCOR

Actores similares

apt-caretoactor · 1apt-rancoractor · 1apt-45actor · 2apt-c-27actor · 2apt-c-01actor · 2apt-c-12actor · 1apt-18actor · 1apt-1877teamactor · 1apt-27actor · 1apt-30actor · 1

Paises afectados

Sectores atacados

URLs nuevas detectadas en IntelTracker