Deep dive into DragonForce ransomware and its Scattered Spider connection

Security researchers analyzed DragonForce, a ransomware-as-a-service operation that rebranded as a "ransomware cartel," detailing its partnership with Scattered Spider for initial access and its use of vulnerable drivers (truesight.sys, rentdrv2.sys), RMM tools, MFA bypass techniques, and multi-platform encryption (Windows, Linux, ESXi) to conduct large-scale extortion and publish victim data.