Description
Lynx is a ransomware family active since mid 2024 that has claimed more than 20 victims across a range of industries. It encrypts files with a .lynx extension, deletes backup files such as shadow copies to hinder recovery, and uniquely sends its ransom note to available printers, and researchers assess it operates on source code bought from the INC ransomware operation.
Stats
- First seen
- May 2022
- Last seen
- October 2026
Alert name variants
| Alert Name |
|---|
| Binary.Malware.Lynx |
| Binary.Trojan.Lynx |
| Gen:Variant.MSIL.Lynx.22 |
| Gen:Variant.MSIL.Lynx.44 |
| Gen:Variant.MSIL.Lynx.48 |
| Gen:Variant.Ransom.Lynx.3 |
| Linux.Ransomware.Lynx |
| Script-JS.Trojan.Lynx |
| Script-JS.Virus.Lynx |
| Script-WScript.Trojan.Lynx |