DragonForce is a financially motivated ransomware-as-a-service (RaaS) group that emerged in August 2023, pivoting from an earlier pro-Palestinian hacktivist collective known as DragonForce Malaysia, which dates back to 2021. The group rapidly evolved its operational model, launching an affiliate program in June 2024 and rebranding as a "ransomware cartel" in 2025. This group is distinguished by its hybrid motivation, blending geopolitical hacktivism with significant financial extortion, and its sophisticated affiliate ecosystem that utilizes customized ransomware variants derived from leaked LockBit 3.0 and Conti V3 codebases. DragonForce stands out for its advanced defense evasion techniques, such as the use of "Bring Your Own Vulnerable Driver" (BYOVD) attacks, and novel methods like weaponizing Microsoft Teams relays for command and control. The group has been observed collaborating with other threat actors, notably Scattered Spider, who may act as initial access brokers for DragonF

Aliases del actor

Water Tambanakua

Actores similares

Aoqin Dragonapt · 1Night Dragonapt · 1night-dragonactor · 1aoqin-dragonactor · 1sharp-dragon--chkptactor · 1Amaranth-Dragonapt · 0Camaro Dragonapt · 0Moshen Dragonapt · 0Operation Dragon Castlingapt · 0blackwaterransomware · 11

Paises afectados

Sectores atacados

URLs nuevas detectadas en IntelTracker