❌

Normal view

Received before yesterday

Threat Research – Sophos News
DragonForce targets rivals in a play for dominance 21 May 2025 at 08:00

DragonForce targets rivals in a play for dominance

Threat Research – Sophos News

21 May 2025 at 08:00

Not content with attacking retailers, this aggressive group is fighting a turf war with other ransomware operators

A screen capture of the 19 March 2025 announcement; the intro reads "Today I would like to present to you our new direction, we are starting to work in a new vein, according to a new principle. You no longer have to work under our brand, now you can create your own brand under the auspices of an already proven partner time! We the DragonForce Ransomware cartel present to you 'projects' now you create yourself."

Two screens showing the BlackLock and Mamona defacements as described in text

A screen capture showing the DragonForce mention on RansomHub as described in text

A screen capture showing the "collaboration" -- text reads "DragonForce & RansomHub -- Hi. Don't worry RansomHub will be up soon, they just decided to move to our infrastructure! We are reliable partners. A good example of how 'projects' work, a new option from The DragonForce Ransomware Cartel!" A postscript at the bottom reads "P.S. -- RansomHub hope you are doing well, consider our offer! We are waiting for everyone in our ranks."

An image showing a crossed-out DragonForce logo and three derpy-looking cartoon dragons

A pair of images; on the left, DragonForce announcement reads "We will be up soon -- Our blog and files server will be up on 29.04.2025 00:00 UTC Thank you for your patience." On the right, the RansomHub announcement reads "Went on a journey... We're still in search for a pirates!"