dragonforce
ransomware group · aka DragonForce, DragonForce Ransomware, DragonForce Cartel · Malaysia (widely reported by vendors; leadership identity and exact origin not officially confirmed) · active since 2023-08
Victims · 7d
3▲1 vs prev. week
Victims · 30d
12active targets
Victims · 90d
71
All-time (tracked)
650since 2023-12-13
Last post
09-16 06:35UTC
Estimated earnings
—public reporting
Profile · glm-5.3-flash · updated
DragonForce is an active ransomware-as-a-service (RaaS) operation first observed in August 2023, widely reported to be Malaysia-linked, with some vendor research connecting its founders to the earlier 'Operation' (a.k.a. Operation Cronos) brand. It runs a 'cartel' model in which multiple affiliates share its encryptors and leak-site infrastructure, sometimes posting victims under their own branding, and it publicly recruited affiliates displaced by the 2024 LockBit and BlackCat/ALPHV law-enforcement takedowns. The group uses double extortion, publishing stolen victim data on its Tor leak blog, and provides encryptors for Windows, Linux, VMware ESXi, macOS, and NAS devices. It drew wide attention in 2025 when Scattered Spider-affiliated intrusions using its tooling hit major UK retailers, and it subsequently launched an updated RaaS panel and a speed-focused encryptor rework. Dashboard leak-site tracking shows sustained high-volume activity (76 victims in the past 90 days), confirming the group remains a major brand.
Tactics & tooling
- RaaS 'cartel' model: shares encryptors and leak infrastructure with affiliates that may post victims under their own branding
- Double extortion: exfiltrates data before encryption and publishes stolen files on its leak blog
- Initial access via IT help-desk social engineering by affiliates (Scattered Spider in the 2025 UK retail incidents)
- Exploitation of internet-facing edge devices and VPNs (e.g., SonicWall SSL VPN activity reported in 2024)
- Multi-platform encryptors covering Windows, Linux, VMware ESXi, macOS, and NAS devices
- 2025 encryptor rework adding distributed encryption across machines and partial-encryption options to accelerate attacks (vendor reporting)
- Public recruiting and rebranding of affiliates from other ransomware ecosystems onto shared infrastructure
Targeted sectors
retailmanufacturingprofessional serviceslegal servicesfinancial servicestechnology and MSPsconstruction
Notable public victims
Marks & Spencer (2025), Co-op Group (2025), Harrods (2025)
CVEs linked to their intrusions
Estimated earnings
No public figure.
Leak-site victims650 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| Cahill Seeds | · Jul 8, 2025 | Cahill Seeds is one of the largest seed growers in eastern Montana, established in 1996. The company specializes in identifying, testing, and multiplying seed g... |
| Silver Lining Herbs | · Jul 5, 2025 | Silver Lining Herbs specializes in herbal supplements for horses, dogs, and humans, providing natural health products aimed at enhancing the well-being of both ... |
| Allegheny Answering Service | · Jul 2, 2025 | Allegheny Answering Service offers a diverse range of communication solutions including answering services and call center services, operating 24/7/365 from the... |
| HKG Duty Free | · Jul 2, 2025 | (database dumps inside) HKG Duty Free is the market leader in electronics, but also now developing comprehensive fashion brand portfolio including Mont Blanc, F... |
| JCC Rockland | · Jul 2, 2025 | The JCC Rockland is dedicated to the enrichment and continuity of Jewish life and to the preservation and celebration of our rich heritage. The center shall str... |
| Dealmed Medical Supplies | · Jun 26, 2025 | (Data of the entire group of companies) Dealmed provides a comprehensive range of medical supplies designed for healthcare professionals. Their products cater t... |
| Pay Tel Communications | · Jun 26, 2025 | Pay Tel Communications, Inc. specializes in providing technology solutions designed to enhance safety and efficiency within confinement facilities and support t... |
| Johnstone Supply Dallas-Fort Worth | · Jun 26, 2025 | Our team is driven by the opportunity to deliver outstanding service to everyone who may visit our stores. Ethics, partnership and integrity are the main values... |
| Antigo Construction | · Jun 26, 2025 | (including email) Antigo Construction is located in Antigo, Wisconsin, and is the company headquarters for the North American and international business operati... |
| Agganis Driving School | · Jun 23, 2025 | Agganis Driving School offers a comprehensive driving program that includes classes, road tests, and specialized training such as defensive driving techniques. ... |
| Hilliard Enterprises | · Jun 23, 2025 | Hilliard Enterprises, Incorporated specializes in the worldwide sale, service, and parts supply for used locomotives and marine engines. They pride themselves o... |
| Brown & Winters | · Jun 23, 2025 | (Including customer data and email) Brown & Winters is a specialized environmental and environmental insurance law firm operating in California, serving public ... |
| Brown & Brown PC | · Jun 23, 2025 | (Including data of several thousand customers) Brown & Brown, P.C., provides the comprehensive legal service and personal, life-long attention of a general prac... |
| AXT | · Jun 20, 2025 | AXT, Inc. designs, develops, manufactures, and distributes compound and single element semiconductor substrates. The company offers indium phosphide for use in ... |
| Huesman Schmid Insurance Agency | · Jun 17, 2025 | (including client documentation and email) Huesman Schmid Insurance Agency is a company that operates in the Insurance industry. It employs 10to19 people and ha... |
| Pressure Dynamics International | · Jun 17, 2025 | Pressure Dynamics International is a company that operates in the Industrial Machinery & Equipment industry. It employs 50to99 people and has 10Mto25M of revenu... |
| Trackside Services | · Jun 17, 2025 | Trackside Services, Inc. manufactures and sells new and remanufactured hydraulic and pneumatic braking systems that eliminate human error, reduce car damage, mi... |
| Clayton Construction | · Jun 17, 2025 | Clayton Construction Company, Inc. is a leading general contractor in the southeast, boasting over forty years of experience in delivering high-quality construc... |
| Strait Steel | · Jun 17, 2025 | Strait Steel Inc - an AISC Certified Company - specializes in structural steel fabrication with projects varying from 500 tons to 3500 tons, and single projects... |
| Alaffia | · Jun 17, 2025 | Alaffia was founded in 2003 in the Olympia, Washington garage of husband and wife team, Olowo-n'djo Tchala and Prairie Rose Hyde. Alaffia crafts popular beauty ... |
| TSE Industries & WHK Biosystems | · Jun 17, 2025 | TSE Industries Inc is a manufacturer of custom-molded plastics, rubber parts, and elastomers. It is based in Clearwater, Florida. Established in 2012, WHK BioSy... |
| TN CPA | · Jun 17, 2025 | (including databases and email) TN CPA offers expert financial solutions and accounting services tailored for businesses in Texas. Their services include tax pl... |
| coBuilder | · Jun 17, 2025 | (including complete databases) Cobuilder is a tech company providing digital solutions for the construction industry, aiming to enhance collaboration, digitaliz... |
| Technology Consultants Group | · Jun 17, 2025 | TCG Sales Technology Consultant Group New, Renew, & Used Systems, Parts We Buy or Trade in Equipment to Recycle, Reuse, or Resell |
| Bridgehead | · Jun 17, 2025 | Bridgehead Coffee specializes in exceptional organic Fairtrade coffee sourced from small-scale farmers. With over 40 years of experience, they emphasize sustain... |
| Ess Brothers & Sons | · Jun 17, 2025 | Ess Brothers and Sons' mission is to provide products and services, in an honorable way, that exceed the expectations and needs of each and every one of our cli... |
| Metropolis Country Club | · Jun 17, 2025 | Metropolis Country Club offers a variety of membership options and recreational activities including golf, racquets, and aquatics. The club features a golf cour... |
| Equip'LaboFROID | · Jun 17, 2025 | Équip'Labo FROID, se positionne en tant que leader sur le marché du matériel des métiers de bouche. |
| Clark Mechanical | · Jun 16, 2025 | The Clark Mechanical Company, LLC. is a privately owned, full service HVAC contracting firm. We provide a wide range of HVAC and plumbing services to commercial... |
| Strafford County NH | · Jun 16, 2025 | Strafford County is a county in the U.S. state of New Hampshire. As of the 2020 census, the population was 130,889. Its county seat is Dover. Strafford County w... |
| Beaumont Products | · May 10, 2025 | Founded in 1991, Georgia, Beaumont Products Inc. manufactures consumer products designed for air care, specialty cleaning and personal care. Located in Kennesaw... |
| Statesman Business Advisors | · May 10, 2025 | Another law firm that not only cannot protect confidential customer data, but after the leak, instead of negotiations, happily went to receive insurance compens... |
| RRS Foodservice | · Apr 23, 2025 | www.rrsfoodservice.com 201 Haley Rd, Ashland, Virginia, 23005, United States 25.94 GB Description RRS Foodservice has all of the products you need to successfully operate your Quick Serve Restaurant, Deli, or Convenience Store. We can supply you with the best products to accommodate fast service, as well as a full line of take out supplies to keep your customers on the go. Benefits of RRS Foodservice: We can accommodate all of your menu needs, including paper supplies, chemicals, and produce We offer online ordering for your convenience In addition to your sales consultant, we have a helpful inside sales support team Free rebate tracking and reporting |
| Condista | · Apr 18, 2025 | Condista specializes in Spanish language pay TV and caters to the U.S. Hispanic and Latin American markets. They offer a diverse portfolio that includes traditi... |
| Precision Textiles | · Apr 18, 2025 | Founded in 1987, Totowa, New Jersey-based Precision Textiles is a global supplier of coated fabrics, nonwovens and laminates for companies in the mattress, home... |
| Miller & Caggiano | · Apr 18, 2025 | Miller Caggiano & Kaplan, LLP. is a law firm that was created out of a deep-rooted desire to assist the injured and disabled worker with the sometimes frustrati... |
| Service Trade SpA | · Apr 18, 2025 | Service Trade SpA is a company that operates in the Consumer Electronics & Computers Retail industry. It employs 50to99 people and has 5Mto10M of revenue. The c... |
| Harris Steel | · Apr 18, 2025 | Harris Steel Company is a steel slitting and processing manufacturer that has been operating since 1950, focusing on building long-term relationships with custo... |
| Ossman Consultants Limited | · Apr 18, 2025 | Ossman Consultants Limited is one of London's leading accountancy firms. We are an established company with over 20 years experience in the industry. We are b... |
| KraftKisarna | · Apr 18, 2025 | We at KraftKisarna mainly carry out electrical control and fire alarm installations, and maintain railways and train stations around Sweden. We also carry out ... |
| Pryor Morrow | · Apr 18, 2025 | Pryor Morrow is a firm specializing in architecture, engineering, and interior design, focused on serving schools, governments, and recreational facilities. Wit... |
| Pratt Homes | · Apr 18, 2025 | Check out the videos below to learn more about our home selection, design, and building processes. Our company has always been a family affair ever since Uncle ... |
| Setpoint Systems | · Apr 18, 2025 | Setpoint Systems is a lean automation integration firm providing engineering, design, build, and controls experts for turn key custom automated solutions using ... |
| Iris ID | · Apr 18, 2025 | Iris ID Systems develops, markets, sells, and distributes iris recognition technology products worldwide. The company also offers access control, time and atten... |
| City of Grove | · Apr 18, 2025 | City of Grove is a company that operates in the Government industry. It employs 10to19 people and has 500Kto1M of revenue. The company is headquartered in Grove... |
| Coulter & Tateoka | · Apr 8, 2025 | www.dac-law.com 11576 S State St Ste 503, Draper, Utah, 84020, United States 103.44 GB Description Coulter Tateoka Attorneys At Law is a law firm based in Draper, Utah, specializing in Business and Real Estate law. They offer a wide range of legal services to individuals and small businesses across Utah and the West, including estate planning and personal injury assistance. The firm is dedicated to providing personalized service to meet the legal needs of their clients and to assist in both preventive and dispute resolution strategies. With a focus on cost-effective solutions, their experienced attorneys aim to achieve the best outcomes for their clients. |
| Kleen-Pak Products | · Apr 6, 2025 | www.kleen-pak.com 2 Loyang Ln, #04-03 Loyang Industrial Estate 508913, Singapore 201.13 GB Description Started in 2003, Kleen-Pak Products Pte Ltd is a leading supplier in Southeast Asia through the design, testing, manufacturing, marketing and distribution of premium quality branded and private-label hygienic products such as wet wipes, pre-moistened beauty mask sheets, sachet products and wiper sheets. We have a very large portfolio of hygienic products from housebrands to private-labels & contract packaging across a wide variety of applications. Our operations & manufacturing facility in Singapore is ISO9001:2008 certified by SGS International and cosmetic GMP certified by the Health Sciences Authority of the Ministry of Health. Kleen-Pak is constantly developing innovative hygienic products for new applications for our housebrands and private-label customers. Our housebrands are available in different categories through NUFRESH and BELLO in personal care, MYGENIE and CHAMPS in baby care, KLEEN-UP in home care and BEST FRIENDS in pet care. |
| Moncaro | · Apr 6, 2025 | www.moncaro.com Via Madonna del Piano, 7/a, 60036 Montecarotto AN, Italy 193.5 GB Description Moncaro is comfortably established in its territory thanks to its agriculturalists and its vineyards. The company plays an important role in the development of economic activities linked to tradition and land, such as viniculture. Committed to the research and conservation of the biodiversity of the many micro-environments of Le Marche region, Moncaro is a fundamental custodian of the memory of this land, a contributor to the maintenance of the economic and social structures and, consequently, of the landscape. Projects conducted by Moncaro, in collaboration with various universities, have led to the selection of local yeasts and to the identification, study and replanting of clones of early Verdicchio vines planted in these hills in bygone times. Moncaro also provides ongoing support to associations and initiatives connected to the culture and history of the territory. |
| DTS -services | · Apr 6, 2025 | www.dtsservices.uk UK, London, St Dts, 112 2.13 GB Description Car repair, car service, sales and etc. |
| Yadea Group Holdings Ltd | · Apr 6, 2025 | www.yadea.com 31/F, Tower Two, Times Square, 1 Matheson Street, Causeway Bay, Hong Kong 1.1 TB Description Stock Code 1585 for Hong Kong Exchanges. One of the leaders in the production of electric bicycles and electric motorcycles in China. Yadea Group Holdings Ltd is an investment holding company principally engaged in the production and sales of electric two-wheelers and related accessories. The Company operates two segments. Electric Two-wheeled Vehicles and Related Accessories segment is principally engaged in the research and development, manufacturing and sales of electric two-wheeled vehicles and related accessories. Batteries segment is mainly engaged in the production and sales of batteries. The Company's products include Guanneng series, three-wheel series, motorcycle series, scooter series, classic series, and others. The Company's products are exported to other countries in Southeast Asia, including the Philippines, Thailand, Malaysia, Laos, and others. |
In the newsAll →
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .