dragonforce
ransomware group · aka DragonForce, DragonForce Ransomware, DragonForce Cartel · Malaysia (widely reported by vendors; leadership identity and exact origin not officially confirmed) · active since 2023-08
Victims · 7d
3▲1 vs prev. week
Victims · 30d
13active targets
Victims · 90d
71
All-time (tracked)
650since 2023-12-13
Last post
09-16 06:35UTC
Estimated earnings
—public reporting
Profile · glm-5.3-flash · updated
DragonForce is an active ransomware-as-a-service (RaaS) operation first observed in August 2023, widely reported to be Malaysia-linked, with some vendor research connecting its founders to the earlier 'Operation' (a.k.a. Operation Cronos) brand. It runs a 'cartel' model in which multiple affiliates share its encryptors and leak-site infrastructure, sometimes posting victims under their own branding, and it publicly recruited affiliates displaced by the 2024 LockBit and BlackCat/ALPHV law-enforcement takedowns. The group uses double extortion, publishing stolen victim data on its Tor leak blog, and provides encryptors for Windows, Linux, VMware ESXi, macOS, and NAS devices. It drew wide attention in 2025 when Scattered Spider-affiliated intrusions using its tooling hit major UK retailers, and it subsequently launched an updated RaaS panel and a speed-focused encryptor rework. Dashboard leak-site tracking shows sustained high-volume activity (76 victims in the past 90 days), confirming the group remains a major brand.
Tactics & tooling
- RaaS 'cartel' model: shares encryptors and leak infrastructure with affiliates that may post victims under their own branding
- Double extortion: exfiltrates data before encryption and publishes stolen files on its leak blog
- Initial access via IT help-desk social engineering by affiliates (Scattered Spider in the 2025 UK retail incidents)
- Exploitation of internet-facing edge devices and VPNs (e.g., SonicWall SSL VPN activity reported in 2024)
- Multi-platform encryptors covering Windows, Linux, VMware ESXi, macOS, and NAS devices
- 2025 encryptor rework adding distributed encryption across machines and partial-encryption options to accelerate attacks (vendor reporting)
- Public recruiting and rebranding of affiliates from other ransomware ecosystems onto shared infrastructure
Targeted sectors
retailmanufacturingprofessional serviceslegal servicesfinancial servicestechnology and MSPsconstruction
Notable public victims
Marks & Spencer (2025), Co-op Group (2025), Harrods (2025)
CVEs linked to their intrusions
Estimated earnings
No public figure.
Leak-site victims650 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| Ifage | · Jul 14, 2026 | Ifage is a foundation based in Geneva dedicated to the continuous education and professional development of adults. It offers a wide range of courses in languag... |
| asimar.com | · Jul 14, 2026 | Asimar | Asian Marine Service PCL is a leading shipyard in Thailand with over 35 years of experience in the shipbuilding and repair industry. The company specia... |
| momenta.cn | · Jul 14, 2026 | Momenta is an AI and autonomous-driving company. All source code, financial documents, configuration files, employee database, and more were stolen. Servers and... |
| Northeast Rescue Systems | · Jul 13, 2026 | Northeast Rescue Systems is a dedicated provider of specialized rescue, safety, and protective equipment serving emergency services and industrial safety commun... |
| Nicholson y Cano Abogados | · Jul 13, 2026 | Nicholson y Cano is a leading full-service law firm in Argentina, established in 1976, with a team of 29 partners and over 150 lawyers. The firm provides except... |
| degeremcia.com | · Jul 13, 2026 | DEGEREMCIA is a food operator that is dedicated to the production, distribution and sale of prepared food. It operates mainly through its own chain of fast-food... |
| www.twtci.com Trans World Trading | · Jul 13, 2026 | Trans World Trading Company, Inc. is a leading business conglomerate in the Philippines, recognized for its trust and reliability since 1946. The company specia... |
| Al - Saidi Factory | · Jul 13, 2026 | Al Saidi Al Saidi Trading and Industry is a prominent group of companies providing tailored chemical and logistics solutions primarily for clients in the Middle... |
| STEP Oiltools | · Jul 13, 2026 | STEP Oiltools is a leading global provider of solids control and drilling waste management services, primarily serving the oil and gas and civil engineering ind... |
| Access Equipment Hire | · Jul 11, 2026 | Access Group International is a leading privately owned provider of access, material handling, power generation, and construction equipment. The company is dedi... |
| The Schuett Companies | · Jul 11, 2026 | The Schuett Companies, Inc. is a family-owned business with over 50 years of experience specializing in affordable housing for seniors, individuals with disabil... |
| hive360.com | · Jul 7, 2026 | HIVE360 is a UK-based employment administration and employee benefits specialist. They help businesses streamline their payroll and HR operations while improvin... |
| amplesurveyor.com | · Jul 7, 2026 | Ample Surveyor Services Limited is a professional property and construction consultancy firm based in Hong Kong. |
| medipakpharma.com | · Jun 29, 2026 | The Pakistani pharmaceutical company Medipak Limited (medipakpharma.com) specializes in the manufacture of infusion solutions, medical devices, and pharmaceutic... |
| hwaseng | · Jun 29, 2026 | A Taiwanese manufacturer with forty years of experience, specializing in the high-precision production of metal fasteners, precision-machined parts, and compone... |
| agroprime | · Jun 29, 2026 | development of specialized software (SaaS) for automating agribusiness management and monitoring field personnel |
| stni.co.kr | · Jun 29, 2026 | Creating accurate virtual replicas involves production facilities, workshops, and equipment for modeling, testing, and optimizing technological processes. |
| vipimaging | · Jun 29, 2026 | VIP Imaging is the largest mobile nuclear imaging company in Southern California, specializing in cardiac PET/CT and SPECT studies for cardiologists. The compan... |
| Aptora | · Jun 27, 2026 | Aptora is an aggressively growing software company in Lenexa, KS. The company offers award-winning software and consulting services to the service and contracti... |
| bits-pilani.ac.in | · Jun 22, 2026 | BITS Pilani is a premier Indian private research university and "Institution of Eminence" known for elite engineering and science programs across five campuses.... |
| mihana-v.com | · Jun 22, 2026 | Here is the comprehensive corporate overview of MIHANA Seisakusho Co., Ltd. based on their official company profiles, technical catalogs, and industrial registr... |
| Tecfi SpA | · Jun 16, 2026 | Tecfi is a company specialising in the design, production and sale of fastening systems. Going into more detail, three production lines can be highlighted. ▪ Pl... |
| Ink | · Jun 14, 2026 | (including internal documentation, counterparties, contractors, software, correspondence, and the like) INK is an award-winning production studio based in Londo... |
| The DRM | · Jun 12, 2026 | Durrat Resort Management specializes in providing high-quality resort management services. Their offerings include operational management, marketing strategies,... |
| Al Ishrak Contracting | · Jun 12, 2026 | Al Ishrak Contracting Company, established in 1975 in Dubai, specializes in construction works including industrial warehouses, residential and commercial build... |
| Cheoy Lee Shipyards | · Jun 12, 2026 | Cheoy Lee Shipyards Ltd. specializes in the design and manufacturing of a diverse range of vessels, including tugs, ferries, crew boats, pilot boats, and luxury... |
| Corniche Hotel Abu Dhabi | · Jun 12, 2026 | At the heart of the Central Business District. Situated along the stunning Corniche stretch, our hotel’s 305 luxurious guest rooms offer breathtaking views of t... |
| A. Liberty Engineering Co. Ltd | · Jun 12, 2026 | Founded in 1973 as Liberty Electrical Engineering Company Limited, A. Liberty Engineering Co Ltd has continually evolved to meet the dynamic needs of the electr... |
| Al Shafar GRC | · Jun 12, 2026 | ASGRC is a leading provider of Glass Fiber Reinforced Concrete (GRC) solutions, specializing in the design, manufacturing, and installation of high-quality prod... |
| Areco | · Jun 11, 2026 | Areco Steel is the parent company of the privately-owned Areco Group, which includes five divisions: Areco Metals, Areco Profiles, Areco Direct, and Areco Prope... |
| Hong Kong Parkview | · Jun 11, 2026 | Hong Kong Parkview offers over 200 luxury serviced apartments and a private clubhouse featuring recreational and dining facilities. Located within Tai Tam Count... |
| Cekok | · Jun 11, 2026 | Çekok Gıda is a leading fruit and vegetable producer in Turkey and Europe, known for its commitment to sustainable agriculture and high-quality products. The co... |
| Brian Cox | · Jun 11, 2026 | Established in 1984, Brian Cox & Company is a leading estate agent in Middlesex, specializing in residential lettings and property management. With six local of... |
| Astec Valves & Fittings Pvt | · Jun 11, 2026 | Astec Valves & Fittings Private Limited specializes in providing high-quality instrumentation and piping solutions for various industries, including Oil & Gas, ... |
| Sayre Associates | · Jun 10, 2026 | (Including clients, projects, emails and financial documents) Sayre Associates, Inc. is a civil engineering and land surveying firm based in Sioux Falls, South ... |
| REHA-ACTIV | · Jun 5, 2026 | REHA-ACTIV is a medical supply company that has been supporting individuals with health limitations for over 30 years. |
| SETS Solutions | · Jun 3, 2026 | SETS Solutions is a prominent information technology company based in Lebanon, serving the Middle East since 1990. The company specializes in a diverse range of... |
| Copamex | · Jun 3, 2026 | Copamex, headquartered in Monterrey, Mexico, and established in 1928, is a paper manufacturing company offering writing and printing, special, corrugated, and k... |
| Taos Mountain Casino | · Jun 1, 2026 | Taos Mountain Casino is a Native American gaming casino located in Taos, New Mexico. It is owned and operated by the Taos Pueblo, a federally recognized tribe k... |
| Panorama BPO | · Jun 1, 2026 | Panorama BPO is a large international company specializing in business process outsourcing (BPO) and providing comprehensive operational services for businesses... |
| Synex International Pvt Ltd | · Jun 1, 2026 | Mechanical, Electrical, and Plumbing (MEP) systems, Extra Low Voltage (ELV) solutions, and Solar energy. |
| Shoreline Sightseeing | · May 30, 2026 | Shoreline Sightseeing offers guided boat tours and water taxi services in Chicago, focusing on architecture and skyline views. Their popular tours include the A... |
| Henry Molded Products Likely to Engage tag. | · May 30, 2026 | Henry Molded Products specializes in the manufacturing of custom molded pulp fiber products and packaging solutions. The company is recognized for its eco-frien... |
| President Container Group | · May 27, 2026 | President Container Inc., founded in 1947 by Marvin and George Grossbard, not only grew into one of the largest independent manufacturers of corrugated products... |
| dunasgroen.nl | · May 27, 2026 | Landscape design supplies store.The company operates very economically and claims to be located on Dunas Groen. You can contact us only through the contact form... |
| northbridge.com | · May 27, 2026 | North Bridge Venture Partners invests in outstanding individuals whose innovative ideas have the potential to transform entire industries. The firm provides fu... |
| wsm.co.uk | · May 27, 2026 | The firm's core business is focused on UK tax services, which are provided to clients seeking an advisor with not only in-depth knowledge to navigate the countr... |
| ksmart.ca | · May 27, 2026 | K. Smart Associates Limited is a consulting engineering and planning company established in 1975, specialising in civil engineering and land use planning. |
| fabbricausa.com | · May 27, 2026 | Fabbrica LLC specializes in design, development, and manufacturing, focusing on high quality standards and a creative approach. It serves clients seeking innova... |
| erh.co.uk | · May 27, 2026 | ERH is a leading provider of traffic management solutions, offering installation, maintenance and commissioning services throughout the UK. |
In the newsAll →
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .