ZeroHour

dragonforce

ransomware group · aka DragonForce, DragonForce Ransomware, DragonForce Cartel · Malaysia (widely reported by vendors; leadership identity and exact origin not officially confirmed) · active since 2023-08

Victims · 7d
1▼1
Victims · 30d
11active targets
Victims · 90d
69
All-time (tracked)
648since 2023-12-13
Last post
09-11 16:41UTC
Estimated earnings
public reporting
Profile · glm-5.3-flash · updated

DragonForce is an active ransomware-as-a-service (RaaS) operation first observed in August 2023, widely reported to be Malaysia-linked, with some vendor research connecting its founders to the earlier 'Operation' (a.k.a. Operation Cronos) brand. It runs a 'cartel' model in which multiple affiliates share its encryptors and leak-site infrastructure, sometimes posting victims under their own branding, and it publicly recruited affiliates displaced by the 2024 LockBit and BlackCat/ALPHV law-enforcement takedowns. The group uses double extortion, publishing stolen victim data on its Tor leak blog, and provides encryptors for Windows, Linux, VMware ESXi, macOS, and NAS devices. It drew wide attention in 2025 when Scattered Spider-affiliated intrusions using its tooling hit major UK retailers, and it subsequently launched an updated RaaS panel and a speed-focused encryptor rework. Dashboard leak-site tracking shows sustained high-volume activity (76 victims in the past 90 days), confirming the group remains a major brand.

Tactics & tooling
  • RaaS 'cartel' model: shares encryptors and leak infrastructure with affiliates that may post victims under their own branding
  • Double extortion: exfiltrates data before encryption and publishes stolen files on its leak blog
  • Initial access via IT help-desk social engineering by affiliates (Scattered Spider in the 2025 UK retail incidents)
  • Exploitation of internet-facing edge devices and VPNs (e.g., SonicWall SSL VPN activity reported in 2024)
  • Multi-platform encryptors covering Windows, Linux, VMware ESXi, macOS, and NAS devices
  • 2025 encryptor rework adding distributed encryption across machines and partial-encryption options to accelerate attacks (vendor reporting)
  • Public recruiting and rebranding of affiliates from other ransomware ecosystems onto shared infrastructure
Targeted sectors
retailmanufacturingprofessional serviceslegal servicesfinancial servicestechnology and MSPsconstruction
Notable public victims

Marks & Spencer (2025), Co-op Group (2025), Harrods (2025)

CVEs linked to their intrusions
Estimated earnings

No public figure.

Leak-site victims

VictimDiscoveredDetails
Medical Department Store · 4d agoMedical Department Store in united state
Homewood Sales · 11d agoHomewood Sales Corporation specializes in equipment life extension solutions, offering a wide range of products including automatic voltage regulators, control ...
Norwood Law Firm · 11d agoNorwood Law is a Tulsa-based legal firm that specializes in personal injury law, criminal defense, business law, and family law. Founded by attorney Joe Norwood...
rubbermill.com · 14d ago═════════════════ ═════════════════ ═════════════════ RUBBERMILL, INC. DUMP: BREAKDOWN OF AN OEM MANUFACTURER LEAK ═════════════════ ═════════════════ ═══════...
Criba · 22d ago(release includes data on Argentina, Uruguay, and other countries, as well as financial documents and client documentation, including a vast amount of informati...
Brookview Financial · 22d ago(data of many thousands of customers, including credit reports, SSNs, addresses, etc.) Brookview Financial is a boutique private lender specializing in quick-cl...
Wozair · 22d agoWozair specializes in the design, manufacture, and installation of heavy-duty heating, ventilating, and air conditioning (HVAC) products for various sectors inc...
Frato · 22d ago(release includes data for the entire group of companies across all countries of operation, financial documentation, shareholder information, personal data of e...
Hogan Omidi P.C. · 25d agoHogan Omidi, P.C. is a boutique law firm specializing in family law, including divorce, child custody, and property division, with a focus on high-asset cases. ...
R & D Machine and Engineering · 28d ago&D Machine and Engineering, LLC specializes in CNC machining of precision metal components primarily for the aerospace, defense, and space industries. The compa...
Vermont XCenter · 29d agoA Vermont coloca seus clientes estrategicamente no Centro das Decisões, pois entende que o cliente deve estar no Centro das Atenções. Com isso estabelecido, a c...
GB Group S.A · Aug 13, 2026GB Group is one of Haiti’s largest private industrial and trading conglomerates. Headquartered in Port-au-Prince, it operates across nine core industries includ...
QPC Global · Aug 11, 2026Quest Personal Care Global Ltd is a global company specializing in affordable beauty and personal care products, with over 30 years of experience and a presence...
Primary Eye Care · Aug 6, 2026We offer a full range of options to meet your eyecare needs. From advanced custom LASIK laser vision correction and cataract surgery to glasses, contact lens fi...
EduSpa · Aug 6, 2026Parkmungak has been operating since 1972, providing a range of services and products tailored to meet the needs of its clients. The company focuses on deliverin...
One Community FCU · Aug 5, 2026(UPD: Added additional internal documentation and longer-term customer data. Also included data showing low network security against breaches.) One Community FC...
P. A. Inc. (Performance Alloys) · Aug 5, 2026P.A. Inc. is a leading distributor of high nickel alloy and specialty stainless steel piping products, based in Houston, Texas. The company offers a comprehensi...
Mike Graham Heating And Air Conditioning · Aug 5, 2026Mike Graham Heating, Air Conditioning & Plumbing is a trusted HVAC and plumbing service provider based in Wichita Falls, Texas, serving the local community sinc...
Baicizhan · Aug 3, 2026Baicizhan is a language learning platform specializing in English instruction. It offers a wide range of tools and resources designed to help users overcome the...
TUI China · Aug 3, 2026An affiliate of TUI Group, the world's number one leisure tourism business, TUI China was established in late 2003 as the first joint venture with foreign major...
Lamont Pridmore · Jul 31, 2026Lamont Pridmore is a leading independent chartered accountancy practice based in Carlisle, Cumbria, and Lancashire, offering a comprehensive range of accountanc...
RUS Industrial · Jul 31, 2026RUS Industrial specializes in heavy industrial construction services, catering to sectors such as chemical refineries, petrochemical plants, oil and gas facilit...
www.mbmlawsc.com · Jul 31, 2026MBM Law (Moore Bradley Myers) is a South Carolina-based law firm founded in 1971. For over half a century, the firm has represented individuals, families, and b...
Katathani Phuket Beach Resort · Jul 27, 2026Katathani Phuket Beach Resort is a luxury beachfront resort located on Kata Noi Beach in Phuket, Thailand, offering a range of accommodations from suites to fam...
Syntron Bioresearch · Jul 26, 2026Syntron Bioresearch, Inc. specializes in manufacturing rapid in vitro diagnostic tests and detection readers, focusing on fertility and over-the-counter tests f...
Deluxe Medical Supply · Jul 26, 2026Deluxe Medical Supply is a distributor of healthcare supplies that focuses on delivering quality home healthcare products and services. They provide a wide rang...
ID engineering · Jul 24, 2026ID Engineering & Automated Systems is a machine builder and integrator with over 50 years of combined experience, established in 2002. The company specializes i...
Koshkaryan Law Group · Jul 22, 2026Koshkaryan Law Group is a legal firm specializing in personal injury and criminal defense cases. They prioritize client service and provide personalized attenti...
NewNet · Jul 18, 2026NewNet S.A. is a Colombian company specializing in managing IT risks, offering advanced and personalized data protection services. Their extensive range of serv...
Kee Wah Bakery · Jul 16, 2026Kee Wah Bakery specializes in traditional and innovative baked goods, offering a wide range of products including mooncakes, festive treats, and gift items. The...
Petrini Valores · Jul 16, 2026Petrini Valores S.A. specializes in personalized wealth management and financial planning, offering tailored financial solutions for individuals, families, and ...
Sinai Grand Casino · Jul 16, 2026Sinai Grand Casino is the premier casino in the Middle East, offering a luxurious gaming experience with a variety of games including roulette, blackjack, and p...
Southport Outdoor Living · Jul 16, 2026Southport Outdoor Living is a Canadian company established in 2008, specializing in outdoor patio furniture. They offer a wide range of products including loung...
Metro Design Cente · Jul 16, 2026Metro Design Center offers a variety of design ideas through its room settings, creating an experience reminiscent of Architectural Digest. The center is conven...
North Atlantic Engineering Consultants · Jul 16, 2026Established in the early 1980's North Atlantic Engineering Consultants has since inception conscientiously led the way with holistic sustainable energy solution...
Heritage Mechanical LLC · Jul 15, 2026Built on a family legacy of proud steamfitters dating back to over 100 years, Heritage Mechanical was established in 2012 to provide quality mechanical service ...
Isegen South Africa (Pty) Ltd · Jul 15, 2026Isegen South Africa (Pty) Ltd is a South African chemical company founded in 1974. It is the sole producer of certain chemical products in South Africa. Data th...
Hughes Atwood & Mullaly pllc · Jul 15, 2026Hughes Atwood & Mullaly PLLC is a full-service law firm that offers professional legal services to individuals, businesses, and institutions in the Upper Valley...
Shillen Mackall & Seldon · Jul 15, 2026Shillen Mackall Seldon Spicer & Fraas is a law firm dedicated to representing personal injury victims primarily in Vermont, New Hampshire, and Florida since 198...
Stephens Precision · Jul 15, 2026Stephens Precision, Inc. is a versatile HUBZone manufacturing facility in Vermont, specializing in the machining of mechanical assemblies, components, and tooli...
Road Ahead Technologies Consultant · Jul 14, 2026马路科技 specializes in advanced 3D scanning and measurement solutions, offering a range of products including GOM ATOS 3D scanners, industrial CT systems, and 3D p...
Edison Global Networks Limited · Jul 14, 2026Edison Global Networks Limited is a Hong Kong-based IT system integrator and managed service provider with regional offices in Shenzhen, Shanghai, and Beijing. ...
SITAV SpA · Jul 14, 2026SITAV specializes in the construction, maintenance, revision, and restoration of trains and railway vehicles, ensuring maximum efficiency for high-speed trains,...
Graphic International Centre · Jul 14, 2026Graphic International Centre LLC (GIC) has been providing top-tier printing solutions and office automation products in the UAE since 1982. The company speciali...
Intron Technology Holdings · Jul 14, 2026Intron Technology Holdings Limited is a fast-growing automotive electronics solutions provider in China focuses on providing solutions targeting critical automo...
Atcom · Jul 14, 2026ATCOM Technology Co., LTD. specializes in manufacturing VoIP products, including various types of IP phones and IP PBX systems. They offer a range of solutions ...
Midal Cables · Jul 14, 2026Founded in 1977, Midal Cables manufactures alluminum rods and wires, overhead line conductors, aluminum clad steel and extruded products. Midal Cables has offic...
Omax Autos · Jul 14, 2026OMAX Autos Limited is a leading manufacturer of sheet metal components, specializing in the production of auto and non-auto components. The company serves vario...
Ifage · Jul 14, 2026Ifage is a foundation based in Geneva dedicated to the continuous education and professional development of adults. It offers a wide range of courses in languag...
asimar.com · Jul 14, 2026Asimar | Asian Marine Service PCL is a leading shipyard in Thailand with over 35 years of experience in the shipbuilding and repair industry. The company specia...

In the newsAll →

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .