DragonForce Ransomware Strikes MSP in Supply Chain Attack

Sophos reported that the DragonForce ransomware group exploited a chain of SimpleHelp RMM vulnerabilities to perform a supply-chain attack against an MSP, pushing a malicious SimpleHelp installer to downstream customers; multiple endpoints were encrypted and some victims suffered data theft for double-extortion. The report details the exploited CVEs, describes DragonForce's affiliate-friendly RaaS model and aggressive marketing, and recommends detection, patching, identity controls, and endpoint monitoring for infostealer activity.