DragonForce Ransomware Group Targets 363 Companies, Expands Cartel-Like Operations Since 2023
ID: 0e57db40-29a3-5b1e-8a09-d9d48146b102
STIX ID: report--0e57db40-29a3-5b1e-8a09-d9d48146b102
Feed Name: GBHackers
Threat Score
**DragonForce Ransomware Cartel:** The report profiles DragonForce, a rapidly evolving Ransomware-as-a-Service cartel active since December 2023 that operates a RansomBay builder, affiliate panel, and public data leak site; it has disclosed 363 victims (Dec 2023–Jan 2026), publishes stolen data, recruits affiliates on dark web forums, and continually modernizes cross-platform ransomware variants and affiliate tooling to maximize disruption and extortion leverage.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.