dragonforce
ransomware group · aka DragonForce, DragonForce Ransomware, DragonForce Cartel · Malaysia (widely reported by vendors; leadership identity and exact origin not officially confirmed) · active since 2023-08
Victims · 7d
3▲1 vs prev. week
Victims · 30d
12active targets
Victims · 90d
71
All-time (tracked)
650since 2023-12-13
Last post
09-16 06:35UTC
Estimated earnings
—public reporting
Profile · glm-5.3-flash · updated
DragonForce is an active ransomware-as-a-service (RaaS) operation first observed in August 2023, widely reported to be Malaysia-linked, with some vendor research connecting its founders to the earlier 'Operation' (a.k.a. Operation Cronos) brand. It runs a 'cartel' model in which multiple affiliates share its encryptors and leak-site infrastructure, sometimes posting victims under their own branding, and it publicly recruited affiliates displaced by the 2024 LockBit and BlackCat/ALPHV law-enforcement takedowns. The group uses double extortion, publishing stolen victim data on its Tor leak blog, and provides encryptors for Windows, Linux, VMware ESXi, macOS, and NAS devices. It drew wide attention in 2025 when Scattered Spider-affiliated intrusions using its tooling hit major UK retailers, and it subsequently launched an updated RaaS panel and a speed-focused encryptor rework. Dashboard leak-site tracking shows sustained high-volume activity (76 victims in the past 90 days), confirming the group remains a major brand.
Tactics & tooling
- RaaS 'cartel' model: shares encryptors and leak infrastructure with affiliates that may post victims under their own branding
- Double extortion: exfiltrates data before encryption and publishes stolen files on its leak blog
- Initial access via IT help-desk social engineering by affiliates (Scattered Spider in the 2025 UK retail incidents)
- Exploitation of internet-facing edge devices and VPNs (e.g., SonicWall SSL VPN activity reported in 2024)
- Multi-platform encryptors covering Windows, Linux, VMware ESXi, macOS, and NAS devices
- 2025 encryptor rework adding distributed encryption across machines and partial-encryption options to accelerate attacks (vendor reporting)
- Public recruiting and rebranding of affiliates from other ransomware ecosystems onto shared infrastructure
Targeted sectors
retailmanufacturingprofessional serviceslegal servicesfinancial servicestechnology and MSPsconstruction
Notable public victims
Marks & Spencer (2025), Co-op Group (2025), Harrods (2025)
CVEs linked to their intrusions
Estimated earnings
No public figure.
Leak-site victims650 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| Platinum Drywall Inc | · Feb 6, 2026 | Platinum Drywall has been providing drywall and framing services to commercial construction companies since 2001. They specialize in metal framing and truss sy... |
| Heavy Motions Inc | · Feb 6, 2026 | Heavy Motions Inc. specializes in advanced hydraulic solutions that cater to various industries, including mobile trucks, construction, agriculture, and oil & g... |
| Wayco Inc | · Feb 5, 2026 | Wayco, Inc. is a family-owned company with over 50 years of experience providing full-service paving solutions in northeastern Pennsylvania. Their extensive off... |
| https://www.platinumdrywall.com/ | · Feb 5, 2026 | Platinum Drywall has been providing drywall and framing services to commercial construction companies since 2001. They specialize in metal framing and truss sy... |
| Perpetuuiti | · Feb 5, 2026 | An initial analysis of the structure and names of the files revealed that the directory contains software source codes, configuration and installation files, ba... |
| Erickson Thorpe & Swainston | · Feb 2, 2026 | The law firm of Erickson, Thorpe & Swainston was founded in 1969. Since then, the firm has effectively and successfully represented its clients in state and fed... |
| T & M Electric LLC | · Feb 1, 2026 | T&M Electric LLC is a state certified full-service electrical contractor based in northeast Florida, specializing in residential and commercial electrical insta... |
| Mullinax Ford | · Feb 1, 2026 | Located in Apopka, FL, Mullinax Ford is proud to be one of the premier dealerships in the area. From the moment you walk into our showroom, you'll know our comm... |
| www.hansemerkurintl.com | · Jan 24, 2026 | HanseMerkur, founded in 1875 and headquartered in Germany, is an insurance company specializing in health insurance and other insurance products. The company of... |
| www.advancedcoolingtech.us | · Jan 24, 2026 | Advanced Cooling Technologies, Inc is a leading provider of medical cooling solutions, specializing in the distribution of Airsys Medical Chillers in the USA. T... |
| Uinta Bank | · Jan 23, 2026 | Established in 1919, Uinta Bank is a community bank headquartered in Mountain View, Wyoming. Uinta Bank is proud to provide community banking to the individuals... |
| JR Advertising Specialties | · Jan 16, 2026 | JR Advertising Specialties Inc specializes in promotional products and business gifts, offering a vast selection to meet various needs. Their product range incl... |
| NWIMS IT Group | · Jan 16, 2026 | NWIMS IT Group provides a complete service for all your technology needs including computer repair and upgrade services for Home and Small Business Users. That... |
| 1171 Rue Notre Dame O, Victoriaville, QC G6P 7L1, Canada. (819) 758-0313 | · Jan 15, 2026 | Soteck specializes in air treatment, automation, industrial refrigeration, and energy efficiency, catering specifically to the agri-food sector. They provide co... |
| UBS Office | · Jan 2, 2026 | United Business Systems specializes in simplifying the management of hardcopy and digital documents for various industries, with a strong focus on education. Th... |
| SINBON Electronics Co., Ltd | · Jan 2, 2026 | SINBON Electronics, a leading Taiwanese maker of electronic components that partners with firms such as ASML Holding N.V. and trades under the ticker 3023.TW, p... |
| Barnes & Jones | · Jan 1, 2026 | Barnes & Jones was founded before the turn of the century by two engineers: Walter Barnes, a graduate of The Massachusetts Institute of Technology, and Bill Jon... |
| Burnex | · Dec 29, 2025 | Burnex Corporation is a leading manufacturer of precision metal stampings and wire forms, offering both custom and standard metal parts for various industries s... |
| NK Technologies | · Dec 29, 2025 | Founded in 1982, NK Technologies is a current sensing technology manufacturer and distributor headquartered in San Jose, California. Products include sensing sw... |
| Neurological Associates | · Dec 28, 2025 | Neuro Associates, located in Kirkland, Washington, is a neurology clinic established in 1974 with a team of four highly experienced neurologists. The clinic off... |
| Caramel | · Dec 27, 2025 | Founded in 1999 and headquartered in London, England, Caramel is a company that manufactures and sells apparel items. |
| Centro Médico Palafox | · Dec 27, 2025 | At Palafox Medical Center, we offer comprehensive healthcare services through a wide range of medical specialties. Our center boasts a broad spectrum of service... |
| BMW Guatemala | · Dec 27, 2025 | BMW Guatemala is a company that operates in the Automobile Dealers industry. It employs 250to499 people and has 10Mto25M of revenue. The company is headquartere... |
| National Credit Regulator (NCR) | · Dec 24, 2025 | The National Credit Regulator (NCR) is the statutory body established under the National Credit Act 34 of 2005 to regulate the South African credit industry. Th... |
| Tri-State Metal Roofing Supply | · Dec 24, 2025 | Tri-State Metal Roofing Supply is Utah's top metal roof supplier offering a variety of roofing and siding materials factory-direct, including standing seam and ... |
| Prime Label | · Dec 24, 2025 | Prime Label Consultants (PLC) specializes in consulting services for food label compliance with USDA and FDA regulations. Their offerings include label expediti... |
| Váhostav | · Dec 22, 2025 | VÁHOSTAV is one of the leading construction companies in Slovakia, specializing in complex and technically demanding projects across various sectors including t... |
| Unipres Alabama Inc. | · Dec 20, 2025 | Unipres is a leading manufacturer of press-formed automotive components in the world. It designs, develops and offers car body structural parts, including upper... |
| Colonial Metals | · Dec 19, 2025 | Colonial Metals, Inc. is a full-service global supplier specializing in over 600 precious metal-based chemicals and services. The company is dedicated to provid... |
| Amla Commerce | · Dec 17, 2025 | Amla Commerce develops ecommerce software platforms. Architected with a focus on long-term sustainability, the platforms offer unmatched flexibility and scalabi... |
| Leger & Shaw | · Dec 16, 2025 | Leger & Shaw is a New Orleans-based law firm established in 1979, specializing in maritime and admiralty law, class actions, complex litigation, commercial liti... |
| Edward J Kone | · Dec 16, 2025 | Edward J. Kone, P.A. is a law firm focused on providing legal services in criminal defense, traffic violations, and personal injury cases. The firm, led by expe... |
| McKee-Pownall Equine Services | · Dec 16, 2025 | McKee-Pownall Equine Services specializes in equine veterinary care, focusing on lameness, sport horse medicine, pre-purchase exams, dentistry, and overall well... |
| LiftPRO | · Dec 16, 2025 | LiftPRO has over 40 years of experience providing lifting, rigging, and weighing solutions for various industries, including transportation and military applica... |
| GPC Industries | · Dec 16, 2025 | GPC Industries Ltd is a leading trade supplier of high-quality access, handling, and storage products in the UK. With over 40 years of experience, they offer a ... |
| Smith Roberts Baldischwiler, LLC | OKC Engineering Firm | · Dec 14, 2025 | Many projects of large companies are now available to public. Customer information, confidential data, and much more. Successful engineering projects begin wit... |
| Temple Shalom | · Dec 13, 2025 | Temple Shalom is a Reform Jewish community of approximately 400 families who celebrate the diversity of modern Judaism in the Washington, D.C. area by welcoming... |
| HKR Architects | · Dec 12, 2025 | HKR Architects is a prominent international architecture and urban design practice founded in 1992, with offices located in London, Dublin, Dubai, and Abu Dhabi... |
| A.S.A.P. Restoration | · Dec 11, 2025 | ASAP Restoration FL is a Florida-based company specializing in emergency restoration services for water, fire, and mold damage, operating 24/7 across South Flor... |
| City of La Vergne | · Dec 8, 2025 | The City of La Vergne provides essential services including police and fire departments, public library, and community events aimed at engaging and educating lo... |
| VoiceTeam Call | · Dec 8, 2025 | VoiceTeam is a leading nearshore provider of sales, customer service and back office support, headquartered in Santiago, Dominican Republic with operations in S... |
| Capo Brothers | · Dec 8, 2025 | Capo Brothers is a premier commercial truck dealer located in Ronkonkoma and West Babylon, specializing in the sales, service, and parts of Isuzu and Mitsubishi... |
| HESCO | · Dec 8, 2025 | HESCO Foodservice Ltd., based out of Edmonton and Calgary, specializes in providing a wide range of products, cleaning supplies, commercial equipment, and kitch... |
| Precision Compounding | · Dec 6, 2025 | Precision Compounding Pharmacy, located in Omaha, NE, specializes in creating customized medications that fit the unique needs of each patient. They collaborate... |
| Jack Levine | · Dec 6, 2025 | Jack Levine PA CPAs is a boutique CPA firm based in the Midtown/Wynwood area of Miami, specializing in corporate tax and accounting services for businesses, ind... |
| King City Lumber | · Dec 5, 2025 | King City Lumber is a well-established provider of quality lumber and building materials, specializing in custom metal structures for over 50 years in the Midwe... |
| 3S Software (Secured Smart Systems Overview Metrics) | · Dec 5, 2025 | 3S Group is a world-class provider of diverse technology services, specializing in software development, applications integration, data management, and analytic... |
| Basra Transports | · Dec 3, 2025 | Basra Transports is a transportation and logistics company that handles freight transportation across North America, including the United States and Canada. 514... |
| Immling Festival DER Festspielort im Chiemgau | · Dec 2, 2025 | DAS FESTIVAL TEAM Umgeben von der schönen Natur des Chiemgau liegt Immling – ein Festspielort, der überrascht. Bereits die Anreise durch den Wald weckt Neugie... |
| Mobilelink USA | · Dec 2, 2025 | Mobilelink USA is a private Cricket Wireless company that deals in providing unlimited 5G LTE services and state of the art devices with an understanding of wh... |
In the newsAll →
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .