← Back to Feed

Cat’s Got Your Files: Lynx Ransomware

December 17, 2025 · DFIR Report · Severity: CRITICAL

Key Takeaways The DFIR Report Services Contact us today for pricing or a demo! The intrusion began in early March 2025 with a single successful Remote Desktop Protocol (RDP) logon to an internet-exposed system. Notably, there was no evidence of credential stuffing, brute forcing, or other failed authentication attempts from the source IP, indicating the […] The post Cat’s Got Your Files: Lynx Ransomware appeared first on The DFIR Report.

Key Takeaways

  • The Lynx ransomware intrusion began with a single successful RDP logon to an internet-exposed system.
  • There was no evidence of credential stuffing, brute forcing, or other failed attempts.
  • The intrusion began in early March 2025, according to the DFIR Report.
☕ Buy a Coffee