LYNX
Named by 2 kept items in this workspace.
Search every workspace for LYNX. It matches the name as written, so it can find other things that share it.
The items that name it 2
Group believed to have emerged after INC's project sale in March 2024, sharing identical codebase with INC; gained 250+ victims in 2025; suspected spin-off/rebrand of INC
Linked by SOCRadar's Threat Research Unit to the FortiBleed operation; an operator with access to FortiBleed infrastructure was found logged into Lynx ransomware negotiation panels; victim data overlapped between the campaigns
All threat actors in this workspace.