DragonForce Ransomware Operators Hint at Ties to Russian Federation

A reported ransomware attack by the group DragonForce forced a major UK retailer to suspend its click-and-collect service and is linked to other victims including Co-op (where member data was stolen). The group operates a white-label ransomware-as-a-service model, claims responsibility for 167 victims across 32 countries, and publicly warned affiliates not to target Russia or former Soviet states—an indication the gang may be serving Russian geopolitical interests as a proxy while continuing criminal extortion operations.