The Lynx Ransomware-as-a-Service (RaaS) group has been found operating a highly organized platform, complete with a structured affiliate program and robust encryption methods. Researchers at Group-IB gained access to the group’s affiliate panel, revealing the inner workings of this sophisticated cyber-threat.
Structured Affiliate Program
Lynx’s affiliate panel is organized into multiple sections, including “News,” “Companies,” “Chats,” “Stuffers” and “Leaks.” This design allows affiliates to configure victim profiles, generate custom ransomware samples and manage data leak schedules within a user-friendly interface.
Affiliates receive an 80% share of ransom proceeds, handle all negotiations and maintain control over the ransom wallet. Lynx also offers additional services, such as a call center to harass victims and advanced storage solutions for high-performing affiliates.
No tags.
