INC ransomware claims attack against Middle Eastern fire security firm

Cybernews reports that major Dubai-based firefighting equipment provider NAFFCO FZCO had 1 TB of data claimed to have been exfiltrated by the INC ransomware-as-a-service operation.

Analysis of screenshots provided by INC revealed NAFFCO FZCO's operational files, including its corporate structure and employee details, a list of yearly contracts with other firms, individual contracts, employee lists, and employee ID photos, according to Cybernews researchers, who noted that the information leak could not only pose a reputational threat to the company but also raise the risk of social engineering and identity theft attacks against impacted employees.

More than 453 organizations have already been targeted by the INC RaaS gang's multi-extortion attacks, with major Defense Department contractor Stark AeroSpace, leading high-end golf apparel and sportswear manufacturer Summit Golf Brands, and Dutch-Belgian multinational retail and wholesale holding firm Ahold Delhaize among its most prominent victims. INC has also taken responsibility for intrusions against North Carolina's City of Thomasville and the UK's City of Leicester.