DragonForce is a ransomware-as-a-service (RaaS) group first identified in late 2023. Originally linked to hacktivist activity, the group pivoted to financially motivated operations by early 2024. Since then, it has accelerated into a highly organized cartel-like network, providing customizable payloads to affiliates, a sophisticated affiliate portal, and shared infrastructure for leak sites and campaigns. The group has targeted a wide range of sectors globally, including major UK retailers such as M&S, Harrods, and Co-op, along with organizations in government, logistics, and manufacturing. Its operations are known for strategic branding flexibility, enabling affiliates to operate under their own labels using DragonForce’s backend services.
Genera un perfil del actor con IA (defensivo) cuando lo pidas.
Este grupo no tiene TTPs curadas. Puedes generar un mapeo MITRE ESTIMADO por IA (no confirmado) a partir de su descripción/notas, solo cuando lo pidas.
Para detección/bloqueo en tu EDR/SIEM. Fuente: ransomware.live.
Firma de detección defensiva para este grupo (úsala en tu EDR/SIEM). Fuente: ransomware.live.
/*
DragonForce ransomware
*/
rule DragonForce_Ransomnote
{
meta:
author = "ransomware.live"
family = "ransomware.dragonforce"
description = "Detects DragonForce ransomware ransom note"
date = "2026-05-04"
severity = 7
score = 70
strings:
$s1 = "DragonForce" ascii nocase
$s2 = "DragonForce_README.txt" ascii nocase
$s3 = ".DragonForce" ascii
$s4 = "dragonforce.onion" ascii nocase
condition:
any of them
}
Conversaciones de rescate divulgadas, con fines de estudio defensivo. Contactos, enlaces y wallets redactados.
Hello! Your files (orcl, IADeAPP, [snip] dbs) have been stolen from your network and encrypted with a strong algorithm. We work for money and are not associated with politics. All you need to do is contact us and pay. --- Our communication process: 1. You contact us. 2. We send you a list of files that were stolen. 3. We decrypt 1 file to confirm that our decryptor works. 4. We agree on the amount, which must be paid using BTC. 5. We delete your files, we give you a decryptor. 6. We give you a detailed report on how we compromised your company, and recommendations on how to avoid such situations in the future. --- Client area (use this site to contact us): Link for Tor Browser: [redactado] >>> Use this ID: [snip] to begin the recovery process. * In order to access the site, you will need Tor Browser, you can download it from this link: [redactado] --- Additional contacts: Support [redactado] [redactado] --- Recommendations: DO NOT RESET OR SHUTDOWN - files may be damaged. DO NOT RENAME OR MOVE the encrypted and readme files. DO NOT DELETE readme files. --- Important: If you refuse to pay or do not get in touch with us, we start publishing your files. 21/01/2024 00:00 UTC the decryptor will be destroyed and the files will be published on our blog. Blog: [redactado] Sincerely, 01000100 01110010 01100001 01100111 01101111 01101110 01000110 01101111 01110010 01100011 01100101
(release includes data for the entire group of companies across all countries of operation, financial documentation, shareholder information, personal data of employees and clients, and much more) FRATO is recognized for its commitment to quality and style, merging traditional craftsmanship with innovative design. Drawing inspiration from diverse cultures and breathtaking locations worldwide, the brand creates a unique international aesthetic. It offers an exceptional interior lifestyle concept through its flagship stores located across America, Europe, and the Middle East. FRATO's intended clients are those seeking sophistication and inspiration for their living spaces.
| Organización | País | Sector | Grupo | Descubierta |
|---|---|---|---|---|
| Frato | BR | Other | — | 24 ago 2026 |
| Criba | AR | Technology | — | 24 ago 2026 |
| Brookview Financial | CA | Financial Services | — | 24 ago 2026 |
| Wozair | AE | Other | — | 24 ago 2026 |
| Hogan Omidi P.C. | US | Professional Services | — | 21 ago 2026 |
| R & D Machine and Engineering | US | Manufacturing | — | 18 ago 2026 |
| Vermont XCenter | BR | Not Found | — | 17 ago 2026 |
| GB Group S.A | PL | Financial Services | — | 13 ago 2026 |
| QPC Global | GB | Other | — | 11 ago 2026 |
| EduSpa | US | Hospitality | — | 6 ago 2026 |
| Primary Eye Care | US | Healthcare | — | 6 ago 2026 |
| P. A. Inc. (Performance Alloys) | US | Manufacturing | — | 5 ago 2026 |
| Mike Graham Heating And Air Conditioning | US | Other | — | 5 ago 2026 |
| TUI China | CN | Hospitality | — | 3 ago 2026 |
| Lamont Pridmore | GB | Not Found | — | 31 jul 2026 |
| RUS Industrial | US | Manufacturing | — | 31 jul 2026 |
| www.mbmlawsc.com | US | Professional Services | — | 31 jul 2026 |
| Katathani Phuket Beach Resort | TH | Hospitality | — | 27 jul 2026 |
| Syntron Bioresearch | US | Healthcare | — | 26 jul 2026 |
| Deluxe Medical Supply | US | Healthcare | — | 26 jul 2026 |
| ID engineering | ID | Manufacturing | — | 24 jul 2026 |
| Koshkaryan Law Group | US | Professional Services | — | 22 jul 2026 |
| One Community FCU | US | Financial Services | — | 21 jul 2026 |
| NewNet | SA | Technology | — | 18 jul 2026 |
| Petrini Valores | AR | Financial Services | — | 16 jul 2026 |
| Sinai Grand Casino | EG | Hospitality and Tourism | — | 16 jul 2026 |
| Southport Outdoor Living | GB | Consumer Services | — | 16 jul 2026 |
| Metro Design Cente | MX | Retail & E-Commerce | — | 16 jul 2026 |
| North Atlantic Engineering Consultants | BW | Business Services | — | 16 jul 2026 |
| Heritage Mechanical LLC | US | Business Services | — | 15 jul 2026 |
| Isegen South Africa (Pty) Ltd | ZA | Energy | — | 15 jul 2026 |
| Hughes Atwood & Mullaly pllc | US | Business Services | — | 15 jul 2026 |
| Shillen Mackall & Seldon | US | Business Services | — | 15 jul 2026 |
| Stephens Precision | US | Manufacturing | — | 15 jul 2026 |
| Edison Global Networks Limited | HK | Telecommunication | — | 14 jul 2026 |
| SITAV SpA | IT | Manufacturing | — | 14 jul 2026 |
| Graphic International Centre | Business Services | — | 14 jul 2026 | |
| Road Ahead Technologies Consultant | CN | Business Services | — | 14 jul 2026 |
| Intron Technology Holdings | TW | Technology | — | 14 jul 2026 |
| Atcom | CN | Telecommunication | — | 14 jul 2026 |
| Midal Cables | AE | Manufacturing | — | 14 jul 2026 |
| asimar.com | MX | Not Found | — | 14 jul 2026 |
| momenta.cn | CN | Technology | — | 14 jul 2026 |
| Northeast Rescue Systems | US | Business Services | — | 13 jul 2026 |
| Nicholson y Cano Abogados | AR | Professional Services | — | 13 jul 2026 |
| degeremcia.com | TR | Not Found | — | 13 jul 2026 |
| www.twtci.com Trans World Trading | PH | Business Services | — | 13 jul 2026 |
| Al - Saidi Factory | SA | Manufacturing | — | 12 jul 2026 |
| STEP Oiltools | RO | Energy | — | 12 jul 2026 |
| Access Equipment Hire | AU | Construction | — | 11 jul 2026 |
| The Schuett Companies | US | Construction | — | 10 jul 2026 |
| hive360.com | Technology | — | 7 jul 2026 | |
| amplesurveyor.com | US | Business Services | — | 7 jul 2026 |
| hwaseng | TW | Not Found | — | 29 jun 2026 |
| agroprime | BR | Agriculture and Food Production | — | 29 jun 2026 |
| stni.co.kr | KR | Not Found | — | 29 jun 2026 |
| vipimaging | US | Healthcare | — | 29 jun 2026 |
| medipakpharma.com | PK | Healthcare | — | 29 jun 2026 |
| Aptora | US | Technology | — | 27 jun 2026 |
| bits-pilani.ac.in | IN | Education | — | 22 jun 2026 |
| mihana-v.com | RU | Not Found | — | 22 jun 2026 |
| Tecfi SpA | IT | Business Services | — | 16 jun 2026 |
| Ink | GB | Not Found | — | 14 jun 2026 |
| Cheoy Lee Shipyards | HK | Manufacturing | — | 12 jun 2026 |
| Al Ishrak Contracting | AE | Construction | — | 12 jun 2026 |
| Corniche Hotel Abu Dhabi | AE | Hospitality and Tourism | — | 12 jun 2026 |
| A. Liberty Engineering Co. Ltd | HK | Manufacturing | — | 12 jun 2026 |
| Al Shafar GRC | AE | Business Services | — | 12 jun 2026 |
| The DRM | BH | Not Found | — | 12 jun 2026 |
| Areco | SE | Not Found | — | 11 jun 2026 |
| Hong Kong Parkview | HK | Hospitality and Tourism | — | 11 jun 2026 |
| Astec Valves & Fittings Pvt | IN | Manufacturing | — | 11 jun 2026 |
| Cekok | TR | Not Found | — | 11 jun 2026 |
| Brian Cox | GB | Not Found | — | 11 jun 2026 |
| Sayre Associates | US | Business Services | — | 10 jun 2026 |
| REHA-ACTIV | DE | Healthcare | — | 5 jun 2026 |
| Copamex | MX | Agriculture and Food Production | — | 3 jun 2026 |
| SETS Solutions | LB | Business Services | — | 3 jun 2026 |
| Synex International Pvt Ltd | LK | Not Found | — | 1 jun 2026 |
| Taos Mountain Casino | US | Hospitality and Tourism | — | 1 jun 2026 |
| Panorama BPO | PH | Business Services | — | 1 jun 2026 |
| Shoreline Sightseeing | US | Hospitality and Tourism | — | 29 may 2026 |
| Henry Molded Products Likely to Engage tag. | US | Manufacturing | — | 29 may 2026 |
| President Container Group | US | Transportation/Logistics | — | 27 may 2026 |
| ksmart.ca | CA | Consumer Services | — | 27 may 2026 |
| practicus.co.uk | GB | Business Services | — | 27 may 2026 |
| refreshmentsystems.co.uk | GB | Consumer Services | — | 27 may 2026 |
| dunasgroen.nl | NL | Agriculture and Food Production | — | 27 may 2026 |
| northbridge.com | CA | Technology | — | 27 may 2026 |
| wsm.co.uk | GB | Not Found | — | 27 may 2026 |
| jcripberger.com | DE | Not Found | — | 27 may 2026 |
| pieralisi.com | IT | Agriculture and Food Production | — | 27 may 2026 |
| nemd.com | NE | Technology | — | 27 may 2026 |
| fabbricausa.com | US | Manufacturing | — | 27 may 2026 |
| erh.co.uk | GB | Business Services | — | 27 may 2026 |
| waypointsolutions.com | US | Business Services | — | 27 may 2026 |
| profundo.nl | NL | Not Found | — | 27 may 2026 |
| FWMK Law Offices | IL | Business Services | — | 27 may 2026 |
| Ramos Rheumatology | US | Healthcare | — | 27 may 2026 |
| hbroch.com | DE | Not Found | — | 27 may 2026 |
| dentonfirm.com | US | Business Services | — | 27 may 2026 |
| novafp.com | BR | Professional Services | — | 14 abr 2026 |
| fgv.br | BR | Education | — | 2 mar 2026 |
| BMW Guatemala | GT | Manufacturing | — | 27 dic 2025 |
| Centro Médico Palafox | MX | Healthcare | — | 27 dic 2025 |
| VoiceTeam Call | DO | Technology | — | 8 dic 2025 |
| Bodega San Huberto | AR | Agriculture and Food Production | — | 22 nov 2025 |
| C&M Software | BR | Technology | — | 22 nov 2025 |
| Kettle, Sánchez & Co | DO | Professional Services | — | 21 nov 2025 |
| Persians - Cortinas - Todos - Alfombrass | AR | Retail & E-Commerce | — | 13 nov 2025 |
| Dental Society of La Plata | AR | Healthcare | — | 27 oct 2025 |
| Marmotech | DO | Manufacturing | — | 27 oct 2025 |
| Grupo Serex | CR | Transportation | — | 8 oct 2025 |
| Grupo DIRIA | CR | Hospitality | — | 27 ago 2025 |
| Banco Guanabara | BR | Financial Services | — | 3 ago 2025 |
| Scolari | BR | Manufacturing | — | 5 nov 2024 |
| Igloo Cellulose | BR | Professional Services | — | 22 ago 2024 |
| biremote.net | PR | Technology | — | 31 may 2024 |
| I.L.A. Local 1964 | MX | Transportation | — | 29 may 2024 |
| Altipal | CO | Professional Services | — | 13 may 2024 |
| Dafiti Argentina | AR | Retail & E-Commerce | — | 13 dic 2023 |
Las direcciones de los sitios de filtración (.onion) se conocen pero no se publican ni se enlazan. Solo se muestran metadatos públicos. ética
(release includes data on Argentina, Uruguay, and other countries, as well as financial documents and client documentation, including a vast amount of information not intended for public disclosure) CRIBA Empresa Constructora Argentina specializes in providing comprehensive solutions for every stage of construction projects, leveraging over 70 years of experience. The company focuses on quality, efficiency, and safety, ensuring that they can execute even the most ambitious architectural designs. Their portfolio includes a variety of projects such as commercial offices, healthcare facilities, and residential buildings. CRIBA is committed to maintaining a zero-accident policy, prioritizing the safety of their workforce.
(data of many thousands of customers, including credit reports, SSNs, addresses, etc.) Brookview Financial is a boutique private lender specializing in quick-close financing solutions for real estate projects. Established in 1992, the company has served as a trusted capital partner for thousands of real estate investors across the nation. They offer a range of loan programs, including commercial bridge loans, fix & flip loans, and special situation financing, with amounts ranging from $75,000 to over $50 million. Known for their personal service and flexible terms, Brookview can close deals in as little as 7 days.
Wozair specializes in the design, manufacture, and installation of heavy-duty heating, ventilating, and air conditioning (HVAC) products for various sectors including Marine, Naval, Military, Nuclear, Oil and Gas, Powergen, and Renewables. Their product range includes air handling units, dampers, filtration solutions, and refrigeration systems. Wozair also offers services such as system design, project management, manufacturing, commissioning, and maintenance. The company aims to provide bespoke solutions to meet specific client requirements while ensuring a safe working environment.
Hogan Omidi, P.C. is a boutique law firm specializing in family law, including divorce, child custody, and property division, with a focus on high-asset cases. The firm is led by experienced attorneys who have authored key reference materials on Colorado family law, providing them with a unique advantage in legal representation. They serve a diverse clientele, including executives, business owners, and professionals, ensuring personalized and strategic legal solutions. With offices in Denver and Aspen, they are dedicated to protecting clients' interests and achieving favorable outcomes in family law matters.
&D Machine and Engineering, LLC specializes in CNC machining of precision metal components primarily for the aerospace, defense, and space industries. The company is known for its ability to maintain tight tolerances and produce complex geometries using advanced 5-axis milling and coordinate measuring machines. With a commitment to quality, R&D Machine has built a strong customer base that includes respected blue-chip companies like NASA. Acquired by Compass Precision in 2022, the company continues to focus on manufacturing mission-critical components for demanding applications.