DragonForce, a ransomware-as-a-service group launched in August 2023, has gained prominence as one of the most active extortion operations, particularly noted in 2024. With 158 reported victims, the gang's rebranding as a 'cartel' is aimed at expanding its affiliate base, allowing others to exploit DragonForce's tools for their ransomware campaigns. Targeted organizations have included well-known retailers, and despite geographical restrictions on their attacks, the gang's operational base remains uncertain, casting doubts on their actual ties to Russia.
DragonForce is attempting to attract numerous affiliates to maximize profits by allowing them to deploy various ransomware, significantly increasing the potential victim pool.
The group imposes restrictions on attacking Commonwealth of Independent States nations, showing a strategic design in their operations, yet the true location of these operators remains unclear.
Collection
[
|
...
]