dragonforce
ransomware group · aka DragonForce, DragonForce Ransomware, DragonForce Cartel · Malaysia (widely reported by vendors; leadership identity and exact origin not officially confirmed) · active since 2023-08
Victims · 7d
3▲1 vs prev. week
Victims · 30d
12active targets
Victims · 90d
71
All-time (tracked)
650since 2023-12-13
Last post
09-16 06:35UTC
Estimated earnings
—public reporting
Profile · glm-5.3-flash · updated
DragonForce is an active ransomware-as-a-service (RaaS) operation first observed in August 2023, widely reported to be Malaysia-linked, with some vendor research connecting its founders to the earlier 'Operation' (a.k.a. Operation Cronos) brand. It runs a 'cartel' model in which multiple affiliates share its encryptors and leak-site infrastructure, sometimes posting victims under their own branding, and it publicly recruited affiliates displaced by the 2024 LockBit and BlackCat/ALPHV law-enforcement takedowns. The group uses double extortion, publishing stolen victim data on its Tor leak blog, and provides encryptors for Windows, Linux, VMware ESXi, macOS, and NAS devices. It drew wide attention in 2025 when Scattered Spider-affiliated intrusions using its tooling hit major UK retailers, and it subsequently launched an updated RaaS panel and a speed-focused encryptor rework. Dashboard leak-site tracking shows sustained high-volume activity (76 victims in the past 90 days), confirming the group remains a major brand.
Tactics & tooling
- RaaS 'cartel' model: shares encryptors and leak infrastructure with affiliates that may post victims under their own branding
- Double extortion: exfiltrates data before encryption and publishes stolen files on its leak blog
- Initial access via IT help-desk social engineering by affiliates (Scattered Spider in the 2025 UK retail incidents)
- Exploitation of internet-facing edge devices and VPNs (e.g., SonicWall SSL VPN activity reported in 2024)
- Multi-platform encryptors covering Windows, Linux, VMware ESXi, macOS, and NAS devices
- 2025 encryptor rework adding distributed encryption across machines and partial-encryption options to accelerate attacks (vendor reporting)
- Public recruiting and rebranding of affiliates from other ransomware ecosystems onto shared infrastructure
Targeted sectors
retailmanufacturingprofessional serviceslegal servicesfinancial servicestechnology and MSPsconstruction
Notable public victims
Marks & Spencer (2025), Co-op Group (2025), Harrods (2025)
CVEs linked to their intrusions
Estimated earnings
No public figure.
Leak-site victims650 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| bunch.ca | · Apr 2, 2026 | It is a leading contractor in the construction of facilities for the oil and gas industry in Western Canada. |
| sutex.com | · Apr 2, 2026 | SUTEX was founded in 1985.Our core business includes the development and marketing of textiles used in the production of clothing, upholstery, lingerie, footwea... |
| fhw-neukoelln.de | · Apr 2, 2026 | Fernheizwerk Neukölln provides heat to homes in the Berlin-Neukölln district. This local heating company generates and supplies heat to approximately 40,000 hom... |
| greenwayfence.com | · Apr 2, 2026 | A wholesale supplier of fencing and railings serving both private homeowners and contractors throughout the East Coast. They offer a wide range of custom fenci... |
| congoleum.com | · Apr 2, 2026 | Founded in 1886 and headquartered in Mercerville, New Jersey, Congoleum develops and manufactures flooring for residential and commercial spaces. |
| atpkg.com | · Apr 2, 2026 | At AT Packaging, employees play a key role—dedication, a commitment to quality, and team spirit are at the core of the company’s business philosophy. If you are... |
| singita.com | · Apr 2, 2026 | Singita is committed to providing unforgettable wildlife experiences, offering accommodations in lodges, camps, and private villas located in some of Africa’s m... |
| cesimaging.com | · Apr 2, 2026 | The company is an authorized dealer for Canon, Sharp, Oce, KIP America, and HP |
| Fountain | · Apr 2, 2026 | Over the last 40 years, Fountain has established itself as Europe's leading supplier of drinks vending machines for businesses, delivering the widest range of s... |
| Elara Engineering | · Apr 2, 2026 | Elara Engineering is a full-service Mechanical, Electrical, Plumbing, Fire Protection, and Technology consulting engineering firm based in Chicago, Illinois. Wi... |
| blossmangas.com | · Apr 1, 2026 | Blossman Gas, founded in 1951 and located in Ocean Springs, Mississippi, is a family-owned business that provides a wide range of services in the liquefied pet... |
| First Trinity Financial | · Apr 1, 2026 | FTFC is an insurance holding company based in Tulsa, Oklahoma. FTFC operates two life insurance companies, Trinity Life Insurance Company (TLIC), Tulsa, Oklahom... |
| Alliance Select Foods International | · Mar 29, 2026 | Alliance Select Foods International, Inc. is a leading seafood company specializing in the tuna canning industry since 2003, producing premium-quality tuna and ... |
| Edward Beiner | · Mar 27, 2026 | Edward Beiner specializes in designer sunglasses and luxury eyewear, offering a blend of fashion and vision. Their product range includes sunglasses and eyeglas... |
| STS Travel | · Mar 27, 2026 | STS Travel was founded in 1984 by two Cornell University graduates who shared one common goal: to specialize in the marketing and operation of travel services d... |
| Groupe Courtois Automobiles | · Mar 27, 2026 | Groupe Courtois is an automotive dealership specializing in Honda vehicles, with over 40 years of experience in the automotive industry. They operate in Chambou... |
| Durable Superior Casters | · Mar 26, 2026 | Durable Superior Casters, Inc. was established in 1991. In a relatively short period of time Durable USA has become the finest manufacturer and importer of cast... |
| kalimaresort.com | · Mar 26, 2026 | Kalima Resort & Spa is a luxurious 5-star resort located just a few minutes from Patong Beach in Phuket, known for its stunning sea views and hillside setting. ... |
| pridesol.com | · Mar 26, 2026 | Pride Solvents & Chemical Co. is an authorized distributor of the largest and most reputable global manufacturers of chemical products and solvents. This list i... |
| ssp-ce.de | · Mar 26, 2026 | SSP Airport Gastronomiegesellschaft mbH operates in the air transport, airport, and aviation services sectors. The company employs between 250 and 499 people an... |
| M3 Group | · Mar 24, 2026 | Founded in Lansing more than 11 years ago by Dowling, M3 Group prides itself on being the only local agency that offers the most comprehensive array of integrat... |
| Edifice Design + Architecture | · Mar 20, 2026 | We shape our buildings, and afterward our buildings shape us - Winston Churchill At Edifice, we believe architecture and design have a unique physical, spiritua... |
| The Farese Group | · Mar 20, 2026 | The Farese Group specializes in retirement income planning, investment management, and financial planning, focusing on the distribution phase of retirement. Wit... |
| theunlimited.co.za | · Mar 20, 2026 | The Unlimited offers a full range of insurance products, including health, auto, legal, and life insurance, designed to provide peace of mind and financial prot... |
| wardencc.com | · Mar 20, 2026 | Warden Construction is a general contractor based in Jacksonville, Florida, specializing in design-build, construction management, renovation, and new construct... |
| odayequipment.com | · Mar 20, 2026 | Founded in 1935, ODay Equipment specializes in supplying and maintaining equipment for the oil and gas industry, serving customers in the U.S. Midwest.The compa... |
| sopower.com | · Mar 20, 2026 | industrial electrical service provider located in Baton Rouge, LA. Founded in 1994, it specializes in electrical testing, commissioning, maintenance, switchgear... |
| liverpoolphil.com | · Mar 20, 2026 | The Liverpool Philharmonic Hall, which hosts a variety of concerts and events. |
| centreconcrete.com | · Mar 20, 2026 | Centre Concrete has been a leader in the production and delivery of ready-mix concrete in central Pennsylvania since 1956, operating seven production sites. The... |
| Oriska Insurance | · Mar 20, 2026 | Oriska Insurance specializes in providing surety bonding, workers compensation, health insurance, and disability insurance tailored for small and minority-owned... |
| Mercedes-Benz of Arlington | · Mar 20, 2026 | Mercedes-Benz of Arlington is a premier dealership specializing in new and pre-owned Mercedes-Benz vehicles, offering a wide selection of luxury cars, SUVs, and... |
| vatractor.com | · Mar 19, 2026 | Virginia Maryland Tractor specializes in John Deere equipment, offering a wide selection of new and used machinery, financing options, parts, and service. |
| Health Management Systems | · Mar 19, 2026 | Health Management Systems provides tailored health care software designed to enhance business processes and improve staff management for service providers in co... |
| gasteiger.design | · Mar 18, 2026 | Gasteiger specializes in creating unforgettable living designs that reflect individual personalities through unique compositions of materials and craftsmanship.... |
| Construction Equipment Parts | · Mar 18, 2026 | Construction Equipment Parts, LLC is a dismantler specializing in heavy equipment parts for various brands, including wheel loaders, excavators, and articulated... |
| Dynex/Rivett | · Mar 18, 2026 | Dynex/Rivett Inc. specializes in high-pressure hydraulic components and systems, including piston pumps, power units, motors, and valves, designed for demanding... |
| Flexform | · Mar 18, 2026 | Flexform SpA is an Italian company with its head office in Meda, Italy, at the centre of the furniture production district of La Brianza. Founded in 1959 by the... |
| HARTMANN BAU | · Mar 18, 2026 | Hartmann Bau GmbH is a construction company based in Borgentreich near Kassel, specializing in residential, commercial, agricultural, and civil engineering proj... |
| Conrad Capital Management | · Mar 18, 2026 | (including customers personal information and financial data) Conrad Capital Management (CCM) is an independent Registered Investment Advisory firm that provide... |
| bestgraphics.net | · Mar 17, 2026 | Founded in 1977, Best Graphics Group offers a full range of equipment for printing, bookbinding, finishing, and packaging |
| phoenixlabs.com | · Mar 13, 2026 | Phoenix Environmental Laboratories specializes in high-quality analysis of soil, water, air, sediment, and solids, complying with EPA, state environmental prote... |
| Advanced Rehabilitation Technology | · Mar 11, 2026 | Advanced Rehabilitation Technology (ART) specializes in state-of-the-art no-dig technology solutions aimed at protecting and extending the life of critical infr... |
| hazeldenes.com.au | · Mar 11, 2026 | Hazeldenes is a family-owned chicken farm that has been supplying high-quality Australian chicken since 1938. |
| maa-architects.com | · Mar 10, 2026 | Matthew Allchurch Architects (MAA) specializes in high-quality architectural solutions across a range of sectors, including residential, commercial, office, cow... |
| tazzetti.com | · Mar 10, 2026 | TAZZETTI - Special fluids and environmental services: Your international partner in refrigerants, specialty gases, hydrodynamic systems, gaseous waste treatment... |
| Northern Family Farms | · Mar 7, 2026 | Northern Family Farms, located in Merrillan, WI, has been a trusted wholesale supplier of Christmas trees and nursery plants since 1955. They offer a variety of... |
| Graham County Electric Cooperative | · Mar 6, 2026 | Graham County Electric is committed to provide members with affordable cost effective energy solutions. |
| R&C Fence, Inc. | · Mar 6, 2026 | R&C Fence, Inc. is a locally owned and operated company that has been providing custom-built fence installation services for both commercial and residential cli... |
| The Delventhal Company | · Mar 6, 2026 | The Delventhal Company offers a wide range of construction and management services including general contracting, construction management, design-build, and rea... |
| Advanced Rehabilitation Technology (ART) | · Mar 6, 2026 | Advanced Rehabilitation Technology (ART) specializes in state-of-the-art no-dig technology solutions aimed at protecting and extending the life of critical infr... |
In the newsAll →
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .