dragonforce
ransomware group · aka DragonForce, DragonForce Ransomware, DragonForce Cartel · Malaysia (widely reported by vendors; leadership identity and exact origin not officially confirmed) · active since 2023-08
Victims · 7d
3▲1 vs prev. week
Victims · 30d
12active targets
Victims · 90d
71
All-time (tracked)
650since 2023-12-13
Last post
09-16 06:35UTC
Estimated earnings
—public reporting
Profile · glm-5.3-flash · updated
DragonForce is an active ransomware-as-a-service (RaaS) operation first observed in August 2023, widely reported to be Malaysia-linked, with some vendor research connecting its founders to the earlier 'Operation' (a.k.a. Operation Cronos) brand. It runs a 'cartel' model in which multiple affiliates share its encryptors and leak-site infrastructure, sometimes posting victims under their own branding, and it publicly recruited affiliates displaced by the 2024 LockBit and BlackCat/ALPHV law-enforcement takedowns. The group uses double extortion, publishing stolen victim data on its Tor leak blog, and provides encryptors for Windows, Linux, VMware ESXi, macOS, and NAS devices. It drew wide attention in 2025 when Scattered Spider-affiliated intrusions using its tooling hit major UK retailers, and it subsequently launched an updated RaaS panel and a speed-focused encryptor rework. Dashboard leak-site tracking shows sustained high-volume activity (76 victims in the past 90 days), confirming the group remains a major brand.
Tactics & tooling
- RaaS 'cartel' model: shares encryptors and leak infrastructure with affiliates that may post victims under their own branding
- Double extortion: exfiltrates data before encryption and publishes stolen files on its leak blog
- Initial access via IT help-desk social engineering by affiliates (Scattered Spider in the 2025 UK retail incidents)
- Exploitation of internet-facing edge devices and VPNs (e.g., SonicWall SSL VPN activity reported in 2024)
- Multi-platform encryptors covering Windows, Linux, VMware ESXi, macOS, and NAS devices
- 2025 encryptor rework adding distributed encryption across machines and partial-encryption options to accelerate attacks (vendor reporting)
- Public recruiting and rebranding of affiliates from other ransomware ecosystems onto shared infrastructure
Targeted sectors
retailmanufacturingprofessional serviceslegal servicesfinancial servicestechnology and MSPsconstruction
Notable public victims
Marks & Spencer (2025), Co-op Group (2025), Harrods (2025)
CVEs linked to their intrusions
Estimated earnings
No public figure.
Leak-site victims650 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| Capital Star Oil & Gas Inc. | · Dec 2, 2025 | Capital Star Oil & Gas, Inc. is a small independent oil & gas company based in Houston, Texas. Most of drilling activities are financed through private placemen... |
| Division 10 | · Nov 30, 2025 | Division 10 Inc is a company based in Memphis, Tennessee, specializing in supplying specialty products to the construction industry since 1989. They offer servi... |
| Enerre Pharma Lda | · Nov 27, 2025 | A Enerre Pharma nasce da necessidade de adaptação aos novos tempos. Tendo como base fundadora, a estrutura e experiência de mais de 40 anos da empresa Enerre ... |
| Shelbra International | · Nov 26, 2025 | Shelbra International is currently under construction, indicating that they are in the process of developing their offerings. Specific details about their produ... |
| Healthcare Retroactive Audits | · Nov 26, 2025 | 22 171 128 medical record files, neatly packaged into 11 archives by hospital. The firm Healthcare Retroactive Audits, which was auditing the data for insurers,... |
| Emond Publishing | · Nov 26, 2025 | Emond Publishing is a Canadian publisher specializing in legal education materials and resources for law students and professionals. Their product offerings inc... |
| Bodega San Huberto | · Nov 22, 2025 | Bodega | San Huberto offers a welcoming environment for all, catering to both Spanish and English-speaking clients. The company focuses on creating a friendly a... |
| Parsirang | · Nov 22, 2025 | Parsirang is a large Iranian agro-industrial company focused on egg production, but also involved in feed, olive farming, and compost fertilizer. They run a siz... |
| Summit Construction Supply | · Nov 22, 2025 | Summit Construction Supply is a leading commercial construction product supplier based in Loveland, Colorado, specializing in providing a wide range of construc... |
| Nugent Supply | · Nov 22, 2025 | Nugent Supply Company is a Women Business Enterprise (WBE) and a member of the Specialty Tools and Fasteners Distributors Association (STAFDA) based in Loveland... |
| Fueling Solutions Inc. | · Nov 22, 2025 | Fueling Solutions, Inc. specializes in providing commercial, industrial, and mission-critical fueling systems across over 30 countries on four continents. The c... |
| Healthcare & More | · Nov 22, 2025 | Healthcare & Moore, led by independent insurance broker Myra 'Lynn' Moore, specializes in a comprehensive range of insurance products including Medicare plans, ... |
| Barr Trucking Inc. | · Nov 22, 2025 | Barr Trucking was formed in 1981 by William Mark Barr and his Father William DeWitt Barr in Pinckneyville, IL. At the time, Barr Trucking consisted of two water... |
| F-W-S Countertops | · Nov 22, 2025 | F-W-S COUNTERTOPS specializes in the design, fabrication, and installation of premium countertops, including Quartzite, Granite, Sintered Stone, Man-Made Quartz... |
| C&M Software | · Nov 22, 2025 | C&M Software is a leading technology company specializing in solutions for the financial market. Their offerings include automated processes, secure payment int... |
| Gruenberg Kelly Della | · Nov 21, 2025 | One more law firm, which posts glossy Instagram updates about its victories, has now shut down its phones after confronting client‑data leaks and other problems... |
| Kettle, Sánchez & Co | · Nov 21, 2025 | Kettle, Sánchez & Co / OARN is located in Santo Domingo. Kettle, Sánchez & Co / OARN is working in General chemical wholesale, Corporate management, Pharmacies ... |
| Du | · Nov 21, 2025 | Emirates Integrated Telecommunications Company P.J.S.C., commercially rebranded as du in February 2007, is one of the two main telecom operators in the United A... |
| PAN | · Nov 21, 2025 | Founded in 1991 by the current CEO and Managing Director, Mr. Abdul Rahman Al Shamsi, Pan Emirates Furniture has built a regional reputation for great quality p... |
| Persians - Cortinas - Todos - Alfombrass | · Nov 13, 2025 | Descubra las Mejores Cortinas y Persianas en Costa Rica con Persianas Canet En Canet somos expertos en cortinas y persianas en Costa Rica, ofrecemos soluciones... |
| Ponzini S.p.A. | · Nov 8, 2025 | Founded in 1862, Ponzini S.p.A. is a global leader in personal care product manufacturing. With over 160 years of history, the company has evolved to offer inno... |
| DCS TECHNOLOGIES INC. | · Nov 8, 2025 | DCS Technology Inc. is providing complete IT Solutions since 2004. They are specialized in Point of Sale systems, Website Designing, Technical Support, and Comp... |
| GB Mail | · Nov 8, 2025 | GB Mail is a privately owned and leading mailing house located centrally in the home counties. With a strong ethos of delivering mail with no fuss, on time and ... |
| SERAPHITA GmbH | · Nov 5, 2025 | Tax Return February 2025 Good preparation will save time and save time for a transplant. Would you like to prepare the following documents: - latest tax return ... |
| SAIGON INDUSTRIAL SERVICE | · Nov 5, 2025 | Since Saigon Industrial Service's establishment in 2012, we have more than 10 years of experience in supplying, installing, processing, maintaining and repairin... |
| G. Hauswirth Architects | · Nov 3, 2025 | G. Hauswirth Architects G. Hauswirth Architekten AG is one of the leading architectural firms for chalets in Gstaad - Saanenland. Our core areas are residentia... |
| Latona Trucking | · Oct 26, 2025 | latonatrucking.com is a company that operates in the Transportation industry. It employs 100to249 people and has 1Mto5M of revenue. |
| Saturn Machine | · Oct 26, 2025 | Saturn Machine is a leading designer and manufacturer of equipment for major steel companies in North America, specializing in steel fabrication, machining, las... |
| West Welch Reed Engineers | · Oct 26, 2025 | West, Welch, Reed Engineers, Inc. offers engineering services focused on transforming ideas into tangible projects. They cater to a diverse range of clients, pr... |
| Integra SAP | · Oct 20, 2025 | Integra SAP helps businesses solve tough financial challenges. They work with companies to boost cash flow, increase sales performance, and get real-time busine... |
| Egaraset | · Oct 20, 2025 | Egaraset specializes in providing adaptable and flexible IT solutions tailored for small and medium enterprises (SMEs) and religious congregations. With over 20... |
| Marmotech | · Oct 18, 2025 | It owns and manages eight quarries that include marble, travertine, limestone and coralline stones that are processed with state-of-the-art European technology.... |
| Dental Society of La Plata | · Oct 17, 2025 | The Sociedad Odontológica de La Plata (SOLP) is an organization focused on the promotion and advancement of dentistry through education, research, and community... |
| gardiners solicitors | · Oct 17, 2025 | We are a small firm of solicitors based in West Kensington, close to Olympia, established in 1997 by Paul Gardiner. We specialise in: - Property - Shared Owner... |
| José Guma S.A. | · Oct 16, 2025 | José Guma S.A. Occupation: production of household chemicals and hygiene products (soap, cleaning products) + contract manufacturing for third-party brands. L... |
| The Law Offices of Michael C George | · Oct 14, 2025 | The Law Office of Michael C. George, P.A. specializes in personal injury and criminal law, providing legal representation for clients throughout Florida who hav... |
| Autorotor | · Oct 14, 2025 | Autorotor builds custom machinery for factories and manufacturing plants. They make rotating tables, transport belts, rings, and robotic handling equipment that... |
| Fountains Condominium Operations | · Oct 13, 2025 | Fountains Condominium Operations Inc. is an in-house management company dedicated to ensuring the beauty, safety, and stability of the area, promoting neighborl... |
| Express Logistics and Distribution Ltd | · Oct 11, 2025 | We expect Express Logistics and Distribution Ltd to contact us to prevent the publication of a large volume of private data over many years. Express Logistics a... |
| Downes | · Oct 10, 2025 | Proudly managing FMCG brands for over 35 years. With over 94% coverage of the major grocery retailers, Downes services Woolworths, Coles, Independent Supermark... |
| LC Informatique Sàrl | · Oct 8, 2025 | Conseil – Vente Installation informatique Dépannage informatique Réparation toutes marques LC Informatique Sàrl Chemin de la Praille 5 1920 Martigny |
| Allgäu Stern Hotel | · Oct 8, 2025 | AllgäuSternHotel in Sonthofen is a versatile hotel in the Allgäu region, catering to both vacationers and conference attendees. With over 400 rooms and suites, ... |
| Grupo Serex | · Oct 8, 2025 | Segramar — Bulk Handling at Ports Bulk cargo unloading and loading of raw materials at Maracaibo and Puerto Cabello ports. Berthing assistance for bulk carrie... |
| Cofiex Asesoría de Empresas, S.L | · Oct 8, 2025 | Cofiex Asesoría de Empresas, S.L. Type: Business consulting and tax advisory firm Location: Navalmoral de la Mata, Cáceres, Extremadura, Spain Industry: Account... |
| Greenville Legal | · Sep 30, 2025 | David R. Price, Jr., P.A. is a personal injury law firm based in Greenville, South Carolina, specializing in a wide range of legal matters including auto accide... |
| Asserson | · Sep 27, 2025 | (Clients, counterparties, lobbying, deceit, intimidation, pressure on journalists, and other tactics, as revealed in over half a million documents) Asserson Law... |
| Rothmann Immobilien | · Sep 26, 2025 | (Client data inside) Rothmann Immobilien GmbH is a company that operates in the Real Estate industry. It employs 1to4 people and has 1Mto5M of revenue. |
| FTCS Forage | · Sep 26, 2025 | (Client data, accounting records, and internal documentation) FTCS Forage is a company that operates in the Civil Engineering Construction industry. It employs ... |
| Memphis Millwork | · Sep 26, 2025 | (Client data, accounting records, and internal documentation) Memphis Millwork specializes in commercial architectural millwork, catering to clients in Memphis ... |
| Cardinal Machinery | · Sep 26, 2025 | (Full data) Cardinal Machinery is a family-owned business with over 50 years of experience in the Machine Tool Industry, serving clients across Tennessee, Alaba... |
In the newsAll →
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .