Skip to content

Malware

Lynx

According to Nextron, Lynx ransomware is a sophisticated malware threat that has been active since mid-2024.

Lynx is a Windows malware family.

Background

Nextron reports that Lynx is an advanced ransomware threat that has been operating since mid-2024 and has claimed more than 20 victims spanning various industries. After breaking into a system, it encrypts important files and tacks on a ‘.lynx’ extension, while wiping backups such as shadow copies to obstruct recovery. Notably, it also prints the ransom note to any available printers, an unusual touch in its approach. The malware bears a resemblance to earlier INC ransomware, suggesting the operators acquired the INC ransomware source code.


Source: Malpedia (Fraunhofer FKIE).