dragonforce
ransomware group · aka DragonForce, DragonForce Ransomware, DragonForce Cartel · Malaysia (widely reported by vendors; leadership identity and exact origin not officially confirmed) · active since 2023-08
Victims · 7d
3▲1 vs prev. week
Victims · 30d
12active targets
Victims · 90d
71
All-time (tracked)
650since 2023-12-13
Last post
09-16 06:35UTC
Estimated earnings
—public reporting
Profile · glm-5.3-flash · updated
DragonForce is an active ransomware-as-a-service (RaaS) operation first observed in August 2023, widely reported to be Malaysia-linked, with some vendor research connecting its founders to the earlier 'Operation' (a.k.a. Operation Cronos) brand. It runs a 'cartel' model in which multiple affiliates share its encryptors and leak-site infrastructure, sometimes posting victims under their own branding, and it publicly recruited affiliates displaced by the 2024 LockBit and BlackCat/ALPHV law-enforcement takedowns. The group uses double extortion, publishing stolen victim data on its Tor leak blog, and provides encryptors for Windows, Linux, VMware ESXi, macOS, and NAS devices. It drew wide attention in 2025 when Scattered Spider-affiliated intrusions using its tooling hit major UK retailers, and it subsequently launched an updated RaaS panel and a speed-focused encryptor rework. Dashboard leak-site tracking shows sustained high-volume activity (76 victims in the past 90 days), confirming the group remains a major brand.
Tactics & tooling
- RaaS 'cartel' model: shares encryptors and leak infrastructure with affiliates that may post victims under their own branding
- Double extortion: exfiltrates data before encryption and publishes stolen files on its leak blog
- Initial access via IT help-desk social engineering by affiliates (Scattered Spider in the 2025 UK retail incidents)
- Exploitation of internet-facing edge devices and VPNs (e.g., SonicWall SSL VPN activity reported in 2024)
- Multi-platform encryptors covering Windows, Linux, VMware ESXi, macOS, and NAS devices
- 2025 encryptor rework adding distributed encryption across machines and partial-encryption options to accelerate attacks (vendor reporting)
- Public recruiting and rebranding of affiliates from other ransomware ecosystems onto shared infrastructure
Targeted sectors
retailmanufacturingprofessional serviceslegal servicesfinancial servicestechnology and MSPsconstruction
Notable public victims
Marks & Spencer (2025), Co-op Group (2025), Harrods (2025)
CVEs linked to their intrusions
Estimated earnings
No public figure.
Leak-site victims650 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| Concord New Energy Group | · Sep 16, 2025 | Concord New Energy Group Limited (CNE) specializes in wind and solar power operation. To date, we are the only pure vertical integrated clean energy power compa... |
| Engineered Advantage | · Sep 8, 2025 | Engineered Advantage, PSC (EA) is an architecture and engineering (A/E) firm dedicated to serving the public and private sector in the areas of architecture, ci... |
| Caprez Ingenieure AG | · Sep 1, 2025 | Caprez Ingenieure AG provides structural, civil, bridge, water supply, sewage, snow-making, building maintenance, and special fields engineering services. |
| ABM Wireless INC | · Aug 30, 2025 | Inscope is a New York based Master Dealer in the wireless distribution space. Established in 2002, we have grown to become one of the largest Master Dealers for... |
| Hilco Metal Building & Roofing Supply | · Aug 30, 2025 | Hilco Metal Building & Metal Roofing Supply specializes in providing a comprehensive range of metal buildings, roofing materials, and custom-designed arenas spe... |
| Park Country Club | · Aug 30, 2025 | (financial documentation and clients' data internally) Park Country Club is a premier traditional country club located in Western New York. The club offers a co... |
| Toowoomba Friendly Society Dispensary | · Aug 30, 2025 | (Financial documents, counterparties, clients) Friendlies Mobility & Independent Living is a trusted community health partner based in Toowoomba, offering mobil... |
| Provalve Armaturen GmbH & Co. KG | · Aug 30, 2025 | (Financial documents, counterparties, clients) PROVALVE Armaturen GmbH & Co. KG specializes in high-quality valves and fittings designed for demanding applicati... |
| Engineered Components | · Aug 30, 2025 | (Financial documents, counterparties, clients) We also distribute a multitude of other components that are utilized by original equipment manufacturers worldwid... |
| The Smile Spa | · Aug 27, 2025 | At the Smile Spa in Baton Rouge, LA, Dr. Aimee Russo-Mounger provides a variety of dental and spa services. Schedule a dentist appointment or fun spa day. |
| Grupo DIRIA | · Aug 27, 2025 | Grupo Diria is a provider of luxury accommodation in Tamarindo Beach, Costa Rica, offering a range of hotels and resorts. The company is committed to respecting... |
| Dottori Commercialisti Associati | · Aug 23, 2025 | (including financial documentation and client data) DCA - Dottori Commercialisti Associati is a professional association founded by members with over 20 years o... |
| George Haney & Son | · Aug 23, 2025 | George Haney & Son Inc is a family-owned HVAC contractor based in Pasadena, CA, providing services to the San Fernando and San Gabriel Valleys. With a strong re... |
| Selartex | · Aug 23, 2025 | Selartex is a prominent wholesaler of home textiles in France, boasting over 35 years of experience. The company specializes in offering a wide range of home li... |
| GEA Consulting Engineers | · Aug 23, 2025 | (including financial documentation and client data) Founded in 1996, GEA Consulting Engineers is an engineering firm specializing in the design of mechanical, e... |
| Fullcolour.com Limited | · Aug 22, 2025 | We are a family printing business providing Printed Products since 1993. Brochures, leaflets, folders, business stationery, banners, pads and much more. |
| fiermann-eller.de | · Aug 21, 2025 | Fachärzte für Allgemeinmedizin und Innere Medizin Die hausärztliche Medizin bildet die Grundsäule der ärztlichen Versorgung. Wir beraten Sie gerne als erste An... |
| TechSourceOne IT Solutions Provider | · Aug 21, 2025 | Email services & protection Managed email services including SPAM filters, anti-virus, anti-malware protection. |
| InEar hear the difference | · Aug 21, 2025 | InEar GmbH & Co. KG ist ein deutscher Hersteller hochwertiger Hörlösungen mit Sitz in Dieburg. Das Unternehmen entwickelt, produziert und vertreibt innovative I... |
| Krewett | · Aug 21, 2025 | Das Ingenieurbüro Dipl.-Ing. K. Krewett in Iserlohn bietet fundierte Ingenieurdienstleistungen in verschiedenen Bereichen wie Bauplanung, technische Beratung un... |
| IT-Welt und Telekommunikation verschmelzen | · Aug 21, 2025 | IT-Welt und Telekommunikation verschmelzen Wir haben uns auf diese Entwicklung eingestellt und stehen für unsere Kunden als Komplettanbieter für Branchensoftwa... |
| Tomb Multimedia Productions | · Aug 21, 2025 | Providing guidance to the right solution in this ever-evolving landscape we call tomorrow. |
| Sonitrol Security Solutions (SecureFL) | · Aug 21, 2025 | Our mission is to provide the best in electronic security so that OUR community is a safer place to live and work. |
| Dualinfor hito inovation | · Aug 21, 2025 | Dualinfor : Desde 1998 Operamos no mercado português desde Novembro de 1998. Oferecemos uma gama selecionada de produtos e de serviços especialmente orientado... |
| PLN | · Aug 21, 2025 | Core business is the supply of electricity, especially in generation, transmission and distribution. Obtaining the task of electrifying all over the archipelago... |
| Diversified Project Services International | · Aug 6, 2025 | Diversified Project Services International, Inc. (DPSI) is a leader in engineering, geomatics (surveying), planning, permitting, inspection, energy management a... |
| Newton Electrical Contractors | · Aug 5, 2025 | High profile NICEIC Approved Electrical Contractors based in Harrogate and Ripon. We pride ourselves on our quality workmanship within our local family run busi... |
| K2L | · Aug 4, 2025 | Die Digitalisierung schreitet mit Riesenschritten voran. Seit unserer Gründung im Jahr 2003 beraten wir stets auf dem neuesten technischen Stand und unterstütz... |
| Wedlich | · Aug 4, 2025 | WEDLICH. Immobilien & Projektentwicklung war bis 2023 ein Fullservice-Logistiker mit Hauptsitz in Bayreuth. Unser Unternehmen bietet seit 2024 bundesweit zuverl... |
| Koenig Hausverwaltung | · Aug 4, 2025 | Seit mehr als 30 Jahren beschäftigen wir uns zuverlässig, kompetent und mit großem Engagement mit der Verwaltung |
| Banco Guanabara | · Aug 3, 2025 | Banco Guanabara, financiamento de veculos comerciais, financie seu nibus, caminhes e Sprinters, CDC, Leasing, BNDES Finame e Finame Leasing, Av. Brasil 8.255 Ra... |
| Clemens Construction | · Aug 2, 2025 | (Banking, insurance, financial, and HR documentation. Audit. Client documentation.) Clemens Construction is a reputable construction firm based in Philadelphia,... |
| Pitman Farms | · Aug 2, 2025 | (Financial, banking, and audit documentation. Suppliers, clients, mail correspondence, and many more interesting things about how to significantly increase prof... |
| Framon S.p.A. | · Aug 1, 2025 | FRAMON S.p.A. is an important company that since 1973 is present in the worldwide market as one of the main manufacturing company of non-ferrous casting compone... |
| Software Design Consulting Group | · Jul 28, 2025 | Software Design Consulting Group specializes in tailored software solutions aimed at optimizing business processes across various industries in Dubai, Beirut, a... |
| Votava Nantz & Johnson | · Jul 28, 2025 | (Including customer data) VNJ Law is a prominent law firm in Kansas and Missouri that specializes in personal injury cases, including auto accidents, medical ma... |
| DA Whitacre Construction | · Jul 28, 2025 | D.A. Whitacre Construction, Inc. is a San Diego-based commercial construction firm with nearly 40 years of experience. The company specializes in framing and ha... |
| md-labels-gmbh.com | · Jul 25, 2025 | Property of the Company Production of product labels. Brief description of Mehmet-Serif Dalyanoglu, label production, "MD Labels" Mehmet-Serif Dalyanoglu, labe... |
| Emerson Chiropractic | · Jul 25, 2025 | Emerson Chiropractic has been serving the Southside of Indianapolis, Greenwood, and surrounding communities for over 25 years. Dr. Christian Carter is dedicated... |
| Greeniverse | · Jul 19, 2025 | Greeniverse is a leading solar system company that assists to design and install a solar system to meet the needs of homes and businesses. |
| Farben-Zentrum Schlegel | · Jul 19, 2025 | We are always happy to help you, whether it is roof paints for the renovation of your roof tiles, filling spray cans with varnishes, industrial varnishes or pai... |
| Home Solutions of Iowa | · Jul 18, 2025 | Home Solutions of Iowa is a comprehensive exterior remodeling company that specializes in offering high-quality LeafGuard® gutters, roofing solutions, and insul... |
| Joni L Janecki & Associates | · Jul 16, 2025 | Joni L. Janecki & Associates has been designing ecologically restorative and award-winning outdoor environments for over 30 years, fostering connections to natu... |
| Waverly Cabinets | · Jul 16, 2025 | Waverly Cabinets specializes in providing affordable, high-quality Ready-To-Assemble (RTA) cabinets and related products, including vanities and flooring. Their... |
| Burnett and Son Meat | · Jul 16, 2025 | Burnett and Son Meat Company develops ready-to-eat microwaveable meats and meals using a unique blend of culinary proficiency, food trend knowledge, food scienc... |
| 5àSec | · Jul 16, 2025 | To our surprise, company representatives stated that for a network of over 2000 dry cleaners, publishing database dumps for several countries of presence would ... |
| Mausolff Immobilien | · Jul 15, 2025 | Selling and renting real estate is a matter of absolute trust. With over 35 years of experience and numerous continuing education courses, I am confident that I... |
| Belk | · Jul 14, 2025 | Headquartered in Monroe, North Carolina, Belk is a department store that offers apparel, shoes, accessories, cosmetics, home furnishings and wedding registry on... |
| City of Keene, NH | · Jul 11, 2025 | Keene is a city in Cheshire County, New Hampshire, United States. The population was 23,409 at the 2010 census. It is the seat of Cheshire County. Keene is home... |
| PPC Mechanical Seals | · Jul 9, 2025 | PPC Mechanical Seals was founded in 1958 in Baton Rouge, Louisiana and was one of the first mechanical seal companies to provide repair service on all types of ... |
In the newsAll →
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .