THREAT OPS › Threat News › [incransom] DUCON posted to leak site
[incransom] DUCON posted to leak site
Ransomware group: incransom Victim: DUCON Victim website: ducon.com.co Sector: Manufacturing Country: CO Discovered: 2026-07-28T01:58:50.547575+00:00 Leak-site post: http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/blog/disclosures/6a6321575ae71db30c9bd08e Description: Unauthorized access has been gained to the company's confidential files, including client data, proprietary R
Indicators of compromise
- ducon.com.codomain
- http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/blog/disclosures/6a6321575ae71db30c9bd08eurl