A Guardz Threat Intelligence Case Study | February 2026

On February 19, 2026, the INC Ransomware group launched a high-velocity assault against a managed environment. This report details how autonomous AI outpaced the adversary, ensuring 100% data recovery without human intervention.

1,161

Threat Detections

40ms

Avg. Kill Time

100%

Data Restored

Threat Actor Profile

INC Ransom employs a double-extortion model, focusing on healthcare, government, and MSP sectors. They favor “hands-on-keyboard” tactics over simple automated scripts.

SignatureDetail
Ransom NoteINC-README.txt / .html
Extension.INC
Recon ToolAdvanced Port Scanner (T1046)
The “18-Minute” Window: In modern attacks, lateral movement occurs in minutes. SentinelOne’s autonomous agent neutralized the reconnaissance phase in just 59 milliseconds, forcing the attacker to operate in the dark.

The Autonomous Advantage

During the mass-deployment wave, the threat actor attempted to infect 36 endpoints simultaneously. SentinelOne’s behavioral engine fired six separate detection rules in under half a second, initiating an immediate Rollback sequence.

Using protected Volume Shadow Copies, the system automatically reverted every impacted file. The result: zero data loss, zero business interruption, and total eviction of the threat actor.

About Guardz
Guardz is on a mission to create a safer digital world by empowering Managed Service Providers (MSPs). Their goal is to proactively secure and insure Small and Medium Enterprises (SMEs) against ever-evolving threats while simultaneously creating new revenue streams, all on one unified platform.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.