ZeroHour

dragonforce

ransomware group · aka DragonForce, DragonForce Ransomware, DragonForce Cartel · Malaysia (widely reported by vendors; leadership identity and exact origin not officially confirmed) · active since 2023-08

Victims · 7d
3▲1 vs prev. week
Victims · 30d
12active targets
Victims · 90d
71
All-time (tracked)
650since 2023-12-13
Last post
09-16 06:35UTC
Estimated earnings
public reporting
Profile · glm-5.3-flash · updated

DragonForce is an active ransomware-as-a-service (RaaS) operation first observed in August 2023, widely reported to be Malaysia-linked, with some vendor research connecting its founders to the earlier 'Operation' (a.k.a. Operation Cronos) brand. It runs a 'cartel' model in which multiple affiliates share its encryptors and leak-site infrastructure, sometimes posting victims under their own branding, and it publicly recruited affiliates displaced by the 2024 LockBit and BlackCat/ALPHV law-enforcement takedowns. The group uses double extortion, publishing stolen victim data on its Tor leak blog, and provides encryptors for Windows, Linux, VMware ESXi, macOS, and NAS devices. It drew wide attention in 2025 when Scattered Spider-affiliated intrusions using its tooling hit major UK retailers, and it subsequently launched an updated RaaS panel and a speed-focused encryptor rework. Dashboard leak-site tracking shows sustained high-volume activity (76 victims in the past 90 days), confirming the group remains a major brand.

Tactics & tooling
  • RaaS 'cartel' model: shares encryptors and leak infrastructure with affiliates that may post victims under their own branding
  • Double extortion: exfiltrates data before encryption and publishes stolen files on its leak blog
  • Initial access via IT help-desk social engineering by affiliates (Scattered Spider in the 2025 UK retail incidents)
  • Exploitation of internet-facing edge devices and VPNs (e.g., SonicWall SSL VPN activity reported in 2024)
  • Multi-platform encryptors covering Windows, Linux, VMware ESXi, macOS, and NAS devices
  • 2025 encryptor rework adding distributed encryption across machines and partial-encryption options to accelerate attacks (vendor reporting)
  • Public recruiting and rebranding of affiliates from other ransomware ecosystems onto shared infrastructure
Targeted sectors
retailmanufacturingprofessional serviceslegal servicesfinancial servicestechnology and MSPsconstruction
Notable public victims

Marks & Spencer (2025), Co-op Group (2025), Harrods (2025)

CVEs linked to their intrusions
Estimated earnings

No public figure.

Leak-site victims

VictimDiscoveredDetails
aotco.com · Apr 27, 2026AOTCO specializes in metal finishing solutions, offering a wide range of services, including electroplating, anodizing, and passivation, and has over 45 years o...
wmsopko.com · Apr 27, 2026Wm. Sopko & Sons Co. supplies and distributes the full line of Dumore automatic self-feeding drilling and threading equipment
andrewtjohnson.com · Apr 27, 2026The company is a leading provider of printing and reprographic services, offering image processing, printing, graphic design for exhibitions, copying, offset pr...
fatbrands.com · Apr 27, 2026FAT Brands is a leading global franchising company that strategically acquires, promotes, and develops quick-service, fast-casual, and casual dining concepts a...
mopec.com · Apr 27, 2026Mopec supplies American-made medical equipment and laboratory products for pathological, histological, autopsy, and morgue services.
avalonflooring.com · Apr 27, 2026Avalon Flooring, founded in 1958 and located in Cherry Hill, New Jersey, specializes in installing flooring in both residential and commercial spaces. In additi...
gelatissimo.com.au · Apr 27, 2026A global brand seeking major investors with experience in retail and franchising to expand its artisanal ice cream chain through a master franchise program
rosehillgardens.com · Apr 27, 2026Rosehill Gardens is a professional landscaping company based in Kansas City, employing over 150 specialists in landscape design, maintenance, irrigation, lighti...
massdevelopment.com · Apr 27, 2026MassDevelopment, a state agency for finance and development, partners with businesses, nonprofit organizations, financial institutions, and local communities t...
Synmosa Biopharma · Apr 26, 2026Synmosa is a specialty pharmaceutical corporation that engages in diversified development that includes acting as an agent, manufacturing, OEM, and R&D. Adhered...
INCYTE · Apr 22, 2026Incyte Corporation, a biopharmaceutical company, focuses on the discovery, development, and commercialization of various therapeutics in the United States. The ...
The Galliher Law Firm · Apr 22, 2026The Galliher Law Firm, established in 1974, specializes in personal injury law, providing dedicated legal representation to clients in Las Vegas and surrounding...
Primius Law Firm · Apr 22, 2026Primius Law Firm is a modern and effective legal firm established to provide holistic solutions to various legal issues. With a team of experienced professional...
Champion Homes · Apr 21, 2026Champion Homes is a progressive residential building company which undertakes building work in the Greater Sydney and Illawarra region. Champion Homes operates ...
medicalnetworks CJ GmbH & Co. KG · Apr 17, 2026Medicalnetworks specializes in integrated healthcare solutions, offering services such as ascleoncare and Hybrid-DRG billing. Their products are designed to str...
Empower Group · Apr 16, 2026Empower Group has positioned itself in this space as a hub for it's clients to access these different types of funding products. Empower Group has leveraged par...
Curtis Design Group · Apr 15, 2026Curtis Design Group specializes in home architecture and design, creating beautiful and livable spaces tailored to the needs of families and developers. They fo...
McCOR · Apr 15, 2026McCor is a leading real estate and property management company in Canada, specializing in commercial, retail, and residential property management services. The ...
bela - pharm · Apr 15, 2026bela-pharm GmbH specializes in the production of veterinary pharmaceuticals aimed at enhancing animal health. Their product range includes solutions for various...
Apply Capnor · Apr 14, 2026Capnor specializes in laser scanning, engineering, and 3D data management services, offering a comprehensive range of solutions including design engineering, re...
tremcar.com · Apr 14, 2026Tremcar Drummond Inc. manufactures and designs high-quality textile machinery and equipment. The company was founded in 1962
imadesign.com · Apr 14, 2026IMA Design Group, Inc. specializes in master planning, development services, and landscape architecture, with a particular focus on creating exceptional spaces ...
advprograms.com · Apr 14, 2026Advanced Programs, Incorporated (API) specializes in providing secure, high-quality integrated system solutions designed specifically for government and indust...
novafp.com · Apr 14, 2026Nova Fire Protection Inc. specializes in sprinkler fire suppression systems, offering design, installation, repair, inspection, and testing services to homeown...
ppiplastics.com · Apr 14, 2026Preproduction Plastics Inc. is a company specializing in structural foam injection molding and gas-assisted injection molding.
je-nyc.com · Apr 14, 2026Jacmel Enterprise Inc. offers a wide range of IT services, including Microsoft Dynamics solutions, project services such as data cabling and server configurati...
breslinbuilders.com · Apr 14, 2026Breslin Builders is a general contractor specializing in design and construction, based in Las Vegas, Nevada, and serving the Las Vegas Valley and Southern Neva...
tulsachamber.com · Apr 14, 2026The Talsi Regional Chamber of Commerce is committed to serving as a leading business-oriented organization and improving the quality of life in the community by...
milliondollarbabyco.com · Apr 14, 2026Million Dollar Baby Co. was founded in 1990 and is a proudly family-owned business based in Los Angeles. Since then, MDB has grown to include seven distinct chi...
graphicinfo.com · Apr 14, 2026Graphic Information Systems Inc. specializes in the custom production of barcode labels, product number/identification labels, and warehouse signage, serving bu...
gtlcompany.com · Apr 14, 2026Gloyer-Taylor Laboratories, Inc. (GTL) is a high-tech company specializing in providing revolutionary technologies for the aerospace industry. Its product portf...
edtg.com · Apr 13, 2026The Eldorado Trading Group is a company that operates in the Banking industry. It employs 10to19 people and has 1Mto5M of revenue. The company is headquartered ...
Travel of America · Apr 13, 2026Travel of America specializes in luxury ocean, river, and expedition cruises, as well as hotels, resorts, guided tours, and custom land arrangements for both in...
Lift · Apr 13, 2026Lift AG is a Swiss lift manufacturer established in 1958, specializing in high-quality elevator solutions for residential and commercial buildings. The company ...
rudolf-med.com · Apr 13, 2026RUDOLF Medical GmbH + Co. KG specializes in providing medical products and services. They offer a range of items through E-catalogs and support their clients wi...
www.sistemigestioneintegrata.eu · Apr 13, 2026SGI – Sistemi Gestione Integrata is an Italian consulting firm headquartered in Bergamo, Lombardy, specializing in workplace health & safety, environmental comp...
Affordable Oil · Apr 12, 2026The goal of Affordable Oil is in our name. We strive to provide the best heating oil delivery service at the lowest cost. Our friendly office staff is here Mond...
AnchorsGordon · Apr 7, 2026AnchorsGordon is a law firm based in Northwest Florida with decades of experience in various legal fields. They specialize in complex business and commercial li...
Bit-Wizards · Apr 7, 2026Bit-Wizards is a technology company that develops an application, builds a brand, or move to the cloud. This company is headquartered in Florida
Innovision Holdings · Apr 5, 2026Founded in 2004, InnoVision Holdings Corporation is a group of apparel and accessories companies that focus on brand developments, product innovation, global sa...
Siam Okamura International Co · Apr 4, 2026Siam Okamura International Co., Ltd., established in Thailand in 1996, is a leading provider of high-quality Japanese-designed ergonomic office furniture and in...
AUG Pharma · Apr 4, 2026AUG Pharma is an Egyptian shareholding company dedicated to enhancing public health through the development, manufacturing, and commercialization of innovative ...
Vietnam Fortress Tools JSC · Apr 4, 2026Vietnam Fortress Tools JSC, established in 2006, is a leading manufacturer of gardening tools, with over 90% of its products exported to North America and Europ...
G Plants · Apr 4, 2026G Plants Ltd specializes in providing innovative gardening products and gifts, including seasonal plant items and lawn care solutions. They cater to a diverse c...
Kopran · Apr 4, 2026Kopran Limited & its subsidiary Kopran Research Laboratories Limited has established an indomitable presence in the realm of manufacturing an extensive spectrum...
Asmar Schor & McKenna · Apr 3, 2026Asmar, Schor & McKenna is a leading construction law firm specializing in construction law, government contracts, commercial real estate transactions, and corpo...
jbrand.co.uk · Apr 2, 2026J Brand, headquartered in London, UK, provides a range of services in the electrical engineering and IT sectors.
acmealliance.com · Apr 2, 2026It is a global manufacturer specializing in the custom production of die-cast components for various industries, including the automotive, marine, and agricultu...
northstarmetal.com · Apr 2, 2026Northstar Metal Products is a manufacturer of metal products. Services: CNC machining, laser cutting, robotic welding, powder coating, and prototyping. Industri...
kleankanteen.com · Apr 2, 2026Klean Kanteen was founded in 2004. The company manufactures reusable stainless steel water bottles. The company's headquarters are located in Chico, California.

In the newsAll →

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .