linkc
Intelligence Profile
Linkc is a ransomware group first observed in February 2025, operating a Tor-based data leak site and targeting US-based AI, cloud, aerospace, and manufacturing companies — including H2O.ai — demanding ransoms as high as $15 million using double-extortion tactics.
Threat Analysis
linkc is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of financial.
Financially motivated threat actors like linkc prioritize monetary gain through methods such as ransomware deployment, banking trojans, cryptocurrency theft, BEC scams, or credential harvesting for resale on underground markets.
Known Campaigns
Linkc is conducting an active ransomware campaign targeting organizations across 0 countries. 2 confirmed victims recorded in the last 45 days. Campaign status: ACTIVE (last activity 7 Apr 2026).