Ransomware Gang Goes Full 'Godfather' With Cartel

DragonForce is a ransomware-as-a-service group active since 2023 that is evolving into a cartel-like operation, providing affiliates with comprehensive services (petabyte storage, monitoring, file analysis, decryption and negotiation support) and even automated onboarding; LevelBlue and Check Point reporting indicate technical overlap with leaked Conti code and at least ~250 victims, posing a significant threat to organizations in manufacturing, technology, business services, and construction across the US, UK, Italy, Germany, and Australia.