Ransomware groups test new business models to hit more victims, increase profits

Research shows ransomware groups DragonForce and Anubis are adopting new affiliate/business models—DragonForce rebranded as a “cartel” providing shared infrastructure and brand flexibility for affiliates, while Anubis offers tiered monetization (encryption, data extortion, access-for-sale) and aggressive extortion tactics including regulator notification threats—changes that could expand attack volume and complicate disruption efforts.