dragonforce
ransomware group · aka DragonForce, DragonForce Ransomware, DragonForce Cartel · Malaysia (widely reported by vendors; leadership identity and exact origin not officially confirmed) · active since 2023-08
Victims · 7d
3▲1 vs prev. week
Victims · 30d
12active targets
Victims · 90d
71
All-time (tracked)
650since 2023-12-13
Last post
09-16 06:35UTC
Estimated earnings
—public reporting
Profile · glm-5.3-flash · updated
DragonForce is an active ransomware-as-a-service (RaaS) operation first observed in August 2023, widely reported to be Malaysia-linked, with some vendor research connecting its founders to the earlier 'Operation' (a.k.a. Operation Cronos) brand. It runs a 'cartel' model in which multiple affiliates share its encryptors and leak-site infrastructure, sometimes posting victims under their own branding, and it publicly recruited affiliates displaced by the 2024 LockBit and BlackCat/ALPHV law-enforcement takedowns. The group uses double extortion, publishing stolen victim data on its Tor leak blog, and provides encryptors for Windows, Linux, VMware ESXi, macOS, and NAS devices. It drew wide attention in 2025 when Scattered Spider-affiliated intrusions using its tooling hit major UK retailers, and it subsequently launched an updated RaaS panel and a speed-focused encryptor rework. Dashboard leak-site tracking shows sustained high-volume activity (76 victims in the past 90 days), confirming the group remains a major brand.
Tactics & tooling
- RaaS 'cartel' model: shares encryptors and leak infrastructure with affiliates that may post victims under their own branding
- Double extortion: exfiltrates data before encryption and publishes stolen files on its leak blog
- Initial access via IT help-desk social engineering by affiliates (Scattered Spider in the 2025 UK retail incidents)
- Exploitation of internet-facing edge devices and VPNs (e.g., SonicWall SSL VPN activity reported in 2024)
- Multi-platform encryptors covering Windows, Linux, VMware ESXi, macOS, and NAS devices
- 2025 encryptor rework adding distributed encryption across machines and partial-encryption options to accelerate attacks (vendor reporting)
- Public recruiting and rebranding of affiliates from other ransomware ecosystems onto shared infrastructure
Targeted sectors
retailmanufacturingprofessional serviceslegal servicesfinancial servicestechnology and MSPsconstruction
Notable public victims
Marks & Spencer (2025), Co-op Group (2025), Harrods (2025)
CVEs linked to their intrusions
Estimated earnings
No public figure.
Leak-site victims650 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| Colemanmaterials | · Apr 6, 2025 | www.colemanmaterials.com 3702 W Dora Ave, Wichita, Kansas, 67213, United States 134.93 GB Description Coleman Materials is a concrete materials supplier that aims to redefine the expectations of contractors regarding such suppliers. They offer a wide range of products, including rebar, masonry, thermal moisture, and construction products. Their commitment to hard work and fast delivery helps ensure they meet every promise made to their clients. They primarily serve contractors in the construction industry, providing innovative solutions and reliable materials |
| architekturbuero-heller.de | · Apr 6, 2025 | www.architekturbuero-heller.de Am Stadthafen 16 17235 Neustrelitz Tel: 03981-23 85 75 Fax: 03981-238577 96.27 GB Description Our buildings differ not only in their appearance or location, but above all in the individual needs and ideas of our clients. In order to meet the high standards of this maxim, it is not just a matter of combining current forms or reflecting a trendy style. We do not pick up on fads, but design buildings that reflect the individuality of their users and enhance their quality of life on a daily basis. |
| Thaon-les-Vosges | · Apr 6, 2025 | www.thaonlesvosges.fr 6 avenue des Fusillés 88150 Thaon-les-Vosges, France 9.15 GB Description Municipality of the commune of Thaon-les-Vosges |
| Phil Smith Automotive Group | · Apr 6, 2025 | www.philsmithauto.com 4250 N Federal Hwy, Lighthouse Point, Florida, United States 358.43 GB Description Phil Smith Automotive Group, headquartered in Lighthouse Point, Florida, is a dealership that sells and services Acura, Kia, Dodge, Jeep, Subaru, Chevrolet, Chrysler, Toyota, Mercedes-Benz, Ford, Lincoln, Hyundai, Nissan, and Ram vehicles. |
| Atlanta Plastic & Reconstructive Specialists | · Apr 6, 2025 | www.atlplasticsurgeon.com 5673 Peachtree Dunwoody Rd Ste 870, Atlanta, Georgia, United States 83.43 GB Description Atlanta Plastic & Reconstructive Specialists offers a team of board-certified plastic surgeons to serve you. All of our doctors have years of education and experience! In case that wasn't enough, Atlanta Plastic & Reconstructive Specialists offers the only triple board-certified plastic surgeon in the United States. You are a person, not a procedure! At Atlanta Plastic & Reconstructive Specialists, the doctors take the time to get to know the clients and fully understand their goals for cosmetic surgery. A person's happiness comes first, that is why you'll never be rushed through haphazardly at Atlanta Plastic & Reconstructive Specialists. Atlanta Plastic & Reconstructive Specialists is dedicated to safety. They use only the finest materials and modern techniques to ensure you the highest quality as well as top-notch safety. To ensure further safety for their clients, Atlanta Plastic & Reconstructive Specialists office is located in the medical office building of St. Joseph's Hospital |
| Talley Metal Fabrication | · Apr 6, 2025 | www.jtalleycorp.com 989 W 7th St, San Jacinto, California, 92582, United States 34.27 GB Description Talley Metal Fabrication, located in Southern California, specializes in high-quality structural steel, ornamental iron, electric gates, and custom metal fabrication. Since 1962, the company has been a leader in iron fabrication, providing premier craftsmanship and reliable results. Their offerings include customizable electric gates and a strong commitment to quality in ornamental iron products. Talley Metal Fabrication serves clients looking for high-quality metal solutions in various industries. |
| Southern Avionics | · Apr 6, 2025 | www.southernavionics.com 5055 Belmont St, Beaumont, Texas, 77707, United States 98.79 GB Description Southern Avionics specializes in marine and aviation navigation aids, including Non-Directional Beacon (NDB) production and support, serving a variety of operational needs worldwide. Their product lineup includes NDB transmitters, DGPS systems, antenna tuning units, and a range of accessories tailored for both industrial, civil, and military applications. The company also provides extensive services such as technical support, equipment training, field engineering, and onsite assistance for NDB and DGPS systems. With over six decades of experience in the industry, Southern Avionics continues to enhance their products to ensure safe and reliable navigation solutions. |
| Industrial Dynamics | · Apr 6, 2025 | www.industrialdynamics.com 405 Gordon Dr, Exton, Pennsylvania, 19341, United States 57.84 GB Description Industrial Dynamics Co specializes in flow measurement and management products, offering liquid flowmeters, totalizers, valves, filters, and customized systems for various industrial applications. With over 40 years of experience, the company serves a wide range of sectors including chemical, food and beverage, and pharmaceuticals. They provide not only products but also application assistance and control systems tailored to meet specific customer needs. Industrial Dynamics Co represents multiple leading manufacturers, ensuring a comprehensive inventory and repair support. |
| Dermatology Solutions | · Apr 6, 2025 | www.dermatologysolutions.com 14071 Metropolis Ave, Fort Myers, Florida, 3391 United States 78.38 GB Description At Dermatology Solutions, we provide the highest quality dermatology care, aesthetic and cosmetic dermatology, and now Mohs surgery to the community of Fort Myers, Florida and surrounding areas. Our office specializes in skin care to help you attain healthy and beautiful skin. Whether you are seeking medical care for a problematic skin condition or you simply want to preserve and enhance your skin's youthful glow, our team of medical professionals is committed to providing you with exceptional care for your skin care needs |
| National Electronic Transit (N.E.T) | · Apr 6, 2025 | www.net-move.com 230 Clay Ave, Lyndhurst, NJ 07071, USA +1 201-939-6500 78.79 GB Description Located in Lyndhurst, NJ, National Electronic Transit (N.E.T) specializes in high-value specialized delivery and print production logistics |
| Altara | · Apr 6, 2025 | www.altara.com 3430 American River Drive, Suite 200 Sacramento, CA 95864 US Contact: Gregory Kaeser (877) 374-4377 x3712 99.17 GB Description Altara is a global Microsoft Dynamics Gold Certified partner recognized for providing outstanding ERP & CRM implementations and Microsoft expertise. Our relentless pursuit of customer satisfaction and ability to implement customer specific solutions backed with unparalleled support places us in the top Microsoft Dynamics partners worldwide. What makes Altara a leading Microsoft® Dynamics provider also makes us a valuable partner in furthering the success of our clients’ businesses. |
| IACC Holdings | · Apr 6, 2025 | www.iacc.holdings Plot (45b) 4th Floor, North 90 Street, 5th Settlement, New Cairo, Egypt, 11835 27.75 GB Description IACC Holdings is a privately owned investment company with a focus on shipping and logistics. Our origins trace back to 1979, when industry pioneer Mostafa El Ahwal founded International Associated Cargo Carrier (IACC). Decades of being at the forefront of the Egyptian and regional markets, has poised IACC Holdings to take a leadership role in investing in, and developing the regional and global supply chain. |
| Texla Energy Management | · Apr 6, 2025 | www.texlaenergy.com 1100 Louisiana St Ste 4700, Houston, Texas, 770. 9.64 GB Description Texla Energy Management, Inc. is a privately-held energy marketing company based out of Houston, Texas |
| Mamona DLS | · Mar 20, 2025 | On March 19th, DragonForce breached and defaced Mamona's DLS after security researchers exposed the clear web IP address of the server. Mamona's DLS: owt3kwkxod2pvxlv3uljzskfhebhrhoedrh5gqrxyyd6rrco4frzj5ad.onion |
| Heartcentre | · Mar 10, 2025 | Three Heart Centre sites located at Castle Hill, Merrylands West and Rouse Hill. Professional staff. Prompt access to all investigations and therapy. |
| North American Spares | · Mar 10, 2025 | North American Spares provides strategic turn-key solutions for military aircraft maintenance, offering services that go beyond parts supply. |
| GS Floor Designs | · Mar 10, 2025 | For over 25 years, G.S. Floor Designs, Inc has served Chicagoland with outstanding service and a drive to perfection. Beginning his professional career as a car... |
| Cotswold Fayre | · Mar 10, 2025 | Cotswold Fayre was started by Paul Hargreaves in the Early Nineties originally as the wholesale distribution arm of a number of small Cotswold based companies. ... |
| Vercoe Insurance Brokers | · Mar 10, 2025 | Vercoe Insurance Brokers have been the preferred insurance brokers for Calley Building since 2008. They came to us highly recommended by family members who had ... |
| Steel Dynamics UK | · Mar 10, 2025 | Steel Dynamics are one of the leading steel stockholders and Processors in the UK. Offering a wide range of stainless steel in a variety of grades our customer ... |
| E Leet Woodworking | · Mar 10, 2025 | E. Leet Woodworking custom designs and fabricates unique and high-quality wood products for businesses using precise CNC woodworking technology. Their services ... |
| Al Bawani | · Feb 22, 2025 | www.albawani.net Prince Sultan Street, Olaya, Riyadh, Saudi Arabia 6.96 TB Description Al Bawani, headquartered in Riyadh, Saudi Arabia, is a construction company specializing in housing complexes, industrial & commercial buildings, hospitals, educational institutions, and more |
| Tristram European | · Feb 22, 2025 | tristrameuropean.co.nz 3 Hillside Road, Wairau Valley, Auckland 0627, New Zealand 33.73 GB Description Tristram European is a group of privately-owned Volkswagen, SKODA and MG dealerships located on Auckland's North Shore and West Auckland. Our main goal is to provide the best possible service and help you find exactly what you're looking for. Whether you're after something fun or convenient we can help you out. The search starts right here on our website, which is why we have provided a number of tools to help you get started. Our services at Tristram will continue long after you have purchased one of our new or used vehicles. Our service department will take care of any and all of your maintenance and repair needs. They can also answer questions about parts and give honest estimates on cost and time. Whatever your automotive needs may be, we can help you out. |
| O&S Associates | · Feb 11, 2025 | O&S Associates www.oandsassociates.com 145 Main St, Hackensack, New Jersey, 07601 388.24 GB Founded in 1996, O&S Associates is a national full service multi-disciplined Architectural, Engineering and Planning firm. The firm is headquartered in Hackensa |
| Accelerator | · Feb 11, 2025 | Accelerator www.accelerator.no 81 Lahaugmoveien, Skjetten, Akershus, 2013 1020.98 MB Accelerator AS is a 100% Norwegian, owner-lead logistics provider with broad competence in the field of Third Party Logistics (3PL). |
| Farrar Corporation | · Jan 31, 2025 | www.farrarusa.com 301 Levee Drive Manhattan, KS 66502 69.83 GB Description Farrar Corporation is a leading supplier of ductile iron castings and quality machined components. With over 90 years of quality American manufacturing behind us, we deliver innovative ISO-certified results in pattern design, heat treating, CNC machining and assembly services. |
| USGlobeCorp | · Jan 31, 2025 | www.usglobecorp.com 2115 Jericho Turnpike Garden City Park, NY 11040 7.3 GB Description Offering over 5,000 toner cartridges and imaging supplies from over 30 top manufacturers, repair service for computers, laptops, printers, copiers, fax machines, scanners, shredders and typewriters. |
| Kats, Jamison & Associates | · Jan 31, 2025 | www.mkats.com 1 Bustleton Pike, Feasterville Trevose 4.9 GB Description Kats Jamison and Associates is a law firm serving Southeastern PA, NJ, and more, specializing in personal injury cases such as car accidents, motorcycle accidents, slip and falls, medical malpractice, and criminal defense. The firm prides itself on its track record of multi-million dollar settlements and verdicts, representing clients with humanity, humility, and honor, regardless of case size. |
| SCP Building Products | · Jan 31, 2025 | scp-bp.co.uk Babbage Rd, Totnes, Devon, TQ9 5JA 32.27 GB Description SCP started in 1981 as a humble trading post for fixings and plastics aimed at the local window fitting trade. Since the sister company Southfield Windows was resident in the same building, this made a lot of sense as there was always regular trade from the small army of window fitters that descended on the building each morning to stock up for the days fitting. As this continued, and word got round the local trades, the business enjoyed healthy growth through a rapidly increasing customer base. This gave us the ability to expand ranges, strengthen buying power and build relationships with suppliers, many of which are still alive and strong today and are the backbone of our business. |
| Engineering Design Initiative | · Jan 31, 2025 | www.edi-dolejs.com 1112 N 5th St, Minneapolis, Minnesota, 55411 2.97 GB Description Engineering Design Initiative (edi), is a consulting firm focused on sustainable design, energy and the environment. EDI offers full service design, assessment and planning services supporting the mechanical, electrical and low-voltage engineering disciplines. EDI believes that by providing superior customer service coupled with creative, sound engineering, and skilled project management we are making a positive impact on the consulting engineering industry and to our clients through the work we produce. |
| Angotti & Reilly | · Jan 31, 2025 | www.angotti-reilly.com 2200 Jerrold Ave Ste E, San Francisco 3.66 GB Description Angotti & Reilly, Inc brings a service-first approach, competitive pricing, and over 35 years of successful experience in building and engineering to every project we undertake. We offer a variety of construction, construction management and development services on projects up to $25 million in budget. |
| Land and Lakes | · Jan 31, 2025 | www.land-and-lakes.com 123 N Northwest Hwy Fl 2, Park Ridge 366.95 MB Description Land and Lakes Company has been providing excavation services since our inception in 1966. During the past 41 years, we have moved hundreds of millions of cubic yards of earth while completing both construction projects and environmental projects. |
| BENASSI IMMOBILIARE SAS DI BENASSI ROBERTO E C. | · Jan 29, 2025 | www.studiomontanini.com Via Prampolini, 58, 42023 Cadelbosco di Sopra RE, Italia 145.75 GB Description 68.20.01 - Locazione immobiliare di beni propri o in leasing (affitto) |
| Mapping Solutions | · Jan 27, 2025 | www.mappingsolutions.com Michigan, United States, 124 Merriweather Rd, Suite 200 Grosse Pointe Farms, MI 48236 99.09 GB Description We pride ourselves on being the GIS (geographic information systems) software solutions experts that our clients turn to again and again. From retailing, to health care, telecommunications, manufacturing, and public administration, our clients know that a friendly, knowledgeable Mapping Solutions staff member will always be available to help solve a business challenge. |
| Aquasys | · Jan 27, 2025 | www.aquasys.cz CZ, Jamská 2488/65, 591 01 Žďár nad Sázavou Česká republika 97.1 GB Description Construction company specializing in the implementation of water, environmental, transport and engineering network construction. |
| Sawley Lock O'Callaghan | · Jan 25, 2025 | sawleylock.com.au 176 Prospect Rd, Prospect, South Australia 22.22 GB Description Sawley Lock O'Callaghan is an experienced South Australian company dedicated to providing our clients with the highest calibre of service from a broad base of skills and expertise in land surveying and spatial information. We combine high-quality customer service and the use of modern surveying technology to provide services across a wide range of applications - including |
| Jan Nygaard | · Jan 25, 2025 | www.jan-nygaard.dk 1-7 Os Ejby Erhvervsvej, Glostrup, Denmark 86.88 GB Description Jan Nygaard As is a company that operates in the Industrial Machinery & Equipment industry. It employs 100to249 people and has 10Mto25M of revenue. The company is headquartered in Glostrup, Capital Region, Denmark. |
| PT PINS Indonesia | · Jan 13, 2025 | pins.co.id The Telkom Hub, Tower II lt.42 Jl. Jendral Gatot Subroto Kav. 52, Jakarta Selatan 12710, Indonesia 362.14 GB Description PT PINS Indonesia adalah anak usaha Telkom Indonesia yang bergerak di bidang IoT. Untuk mendukung kegiatan bisnisnya, perusahaan ini memiliki delapan kantor area, yakni di Medan, Jakarta, Bandung, Semarang, Surabaya, Denpasar, Makassar, dan Balikpapan. |
| Cogitis | · Jan 13, 2025 | www.cogitis.fr 153 Av. du Professeur Jean Louis Viala Cs 74307, 34090 Montpellier, France 81.49 GB Description COGITIS, syndicat mixte pour le traitement de l'information et les nouvelles technologies : les competences d’une SSII et d’un cabinet conseil au service des collectivites publiques. |
| Ikav Global Energy | · Dec 29, 2024 | www.ikav.com 9 Pl De Clairefontaine, Luxembourg 176.85 GB Description IKAV is an international asset management group that provides institutional investors with investment solutions spanning a broad range of infrastructure energy assets, including solar, concentrated solar power, wind, energy efficiency, geothermal, thermal power plants and upstream. |
| Asheville Eye Associates | · Dec 29, 2024 | www.ashevilleeye.com 1196 Skyland Dr, Sylva, North Carolina 539.46 GB Description Asheville Eye Associates is headquartered in Asheville, North Carolina. The offers services such as, cataract surgery, glaucoma and diabetic vision care, lasik and PRK surgery, full service optical services. The company was founded in 1986. |
| FINN | · Dec 16, 2024 | — |
| Williams Tank Lines | · Dec 16, 2024 | — |
| Engineered Tower Solutions | · Dec 16, 2024 | — |
| Marine Floats | · Dec 16, 2024 | — |
| Precision Walls | · Dec 6, 2024 | — |
| SUSTA S.r.l. | · Nov 30, 2024 | — |
| Mobigator Technology Group | · Nov 30, 2024 | — |
| Graminex | · Nov 16, 2024 | — |
| KGK Group | · Nov 16, 2024 | — |
In the newsAll →
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .