US seizes Virtualine bulletproof hosting domain used by cybercriminals
TRM Labs says the provider took nearly one-fifth of tracked illicit bulletproof-hosting inflows in 2026, and the seizure may not kill the infrastructure.
62
Threat actor
DragonForce
- Mentions · 7d1
- Mentions · 30d2
- All mentions7
- First seenAug 17, 2026
- Last mentioned1d ago
Timeline
7 articles · newest firstGermany Arrests Suspected Qilin Ransomware Leader After Japan Detention
Germany arrested a suspected Qilin leader extradited from Japan, while the gang kept listing new victims.
76
Ransomware Attacks on Manufacturers Surge as Supply Chain Risk Grows
Black Kite reports manufacturing ransomware incidents up 40% in 2026, with new gang The Gentlemen responsible for 12% of attacks.
55
GentleKiller targets more than 400 security processes across 48 products
ESET details the Gentlemen ransomware gang's in-house GentleKiller EDR-killer framework targeting over 400 security processes across 48 products, supplied to affiliates.
68
Ransom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000
GuidePoint reports a ransomware affiliate posing as 'Ransom Busters' charges victims $20,000-$60,000 to delete stolen data, and details UNC6671's $8M AitM extortion wave.
55
DragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 Traffic
Symantec and Carbon Black found DragonForce-linked hackers using Backdoor.Turn, a Go RAT tunneling C2 through Microsoft Teams TURN relays via QUIC.
72
Dragonforce Turf War Ransomware
Infosecurity Magazine reports a turf war within the DragonForce ransomware operation, which could affect its cartel-style affiliate ecosystem.
55
Related CVEs
by mentions- CVE-2023-52271<1%6.5The wsftprm.sys kernel driver 2.0.0.0 in Topaz Antifraud allows low-privileged attackers to kill any (Protected Process Light) process via an IOCTL (which will…
- CVE-2025-1055<1%5.6A vulnerability in the K7RKScan.sys driver, part of the K7 Security Anti-Malware suite, allows a local low-privilege user to send crafted IOCTL requests to…
- CVE-2025-61155<1%5.5The GameDriverX64.sys kernel-mode anti-cheat driver (v7.23.4.7 and earlier) contains an access control vulnerability in one of its IOCTL handlers
Appears with
- Qilinthreat actor · 4
- The Gentlementhreat actor · 2
- Anubisthreat actor · 1
- Group-IBvendor · 1
- Cleovictim · 1
- TRM Labsorganization · 1
- SafePaythreat actor · 1
- ESETvendor · 1
- Black Kitevendor · 1
- Hackledorbthreat actor · 1
- LockBitthreat actor · 1
- Bank of Englandorganization · 1
- INC Ransomthreat actor · 1
- FortiGateproduct · 1
- FBIorganization · 1
- StealCmalware · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.