Ransomware Attacks Build Against Saudi Construction Firms

DragonForce, a ransomware-as-a-service group, claimed to have stolen about 6 TB of data from Saudi construction firm Al Bawani and posted a data-leak entry after the company failed to pay a ransom; leaked materials reportedly included photographs and plans for sensitive facilities. The report highlights a regional uptick in RaaS activity targeting construction and real estate firms across the Middle East, notes possible but unconfirmed links to China or Iran (including one early-stage C2 in Iran), and references broader trends where RaaS lowers attack barriers and increases ransomware incidents in the region.