dragonforce
Known ransomware groupDragonForce is a ransomware-as-a-service operation that gained prominence in 2024, offering affiliates a customizable encryptor and a "cartel" model. It has been linked to high-profile retail and enterprise intrusions and practices aggressive double extortion.
16
Total Claims
10
Critical
—
Records Claimed
7
Industries Hit
Active span: Apr 12, 2026 – Oct 7, 2026 · 16 organizations targeted
Actor Threat Profile
Activity Timeline
Peak: May 2026 (8)Top Targeted Industries
Tradecraft & Infrastructure
0
Documented tools
4 / 5
MITRE tactics / techniques
5
Known leak sites