Lynx Ransomware: The Comedy of Crime Rings with Call Centers and Custom Cryptography!
Lynx affiliates get an 80% ransom cut and handle negotiations, with perks like a victim-harassing call center. Their cross-platform ransomware boasts customizable encryption modes and a recruitment process that rivals top companies. Who knew cybercrime had such a corporate flair?

Hot Take:
Who knew ransomware could be so… organized? With commissions, call centers, and customizable encryption, Lynx isn’t just running a cyber-crime operation; they’re practically a Fortune 500 company—if Fortune 500 companies specialized in digital extortion. It’s like a corporate pyramid scheme, but instead of Tupperware, they’re selling chaos.
Key Points:
- Affiliates get a whopping 80% of the ransom pie, handling negotiations and controlling their own ransom wallets.
- Lynx offers a bundle of cross-platform ransomware compatible with Windows, Linux, and ESXi environments.
- Encryption modes range from “fast” to “entire,” using robust algorithms like Curve25519 Donna and AES-128.
- Lynx avoids targeting morally sensitive entities and employs double extortion tactics.
- The group actively recruits experienced teams and likely adapted the INC ransomware code.
Already a member? Log in here