dragonforce ransomware group
DragonForce is a major ransomware-as-a-service operation first observed in August 2023 that launched a formal affiliate program offering 80% revenue share, then rebranded as a "ransomware cartel" in 2025, gaining notoriety for high-profile attacks on UK retailers Marks & Spencer, Co-op, and Harrods.
- Claims in 7 days
- 0
- Claims in 30 days
- 4
- Reported techniques
- 5
Listings on leak sites are claims by criminals. They are unverified and can be false. coldbraid shows counts here, not names.
Where it claims victims
| Country | Claims in 60 days |
|---|---|
| United States | 3 |
| Ukraine | 1 |
Sectors
| Sector | Claims in 60 days |
|---|---|
| Technology | 3 |
| Energy & Utilities | 1 |
| Manufacturing | 1 |
Reported techniques
User ExecutionIndicator RemovalFile and Directory DiscoveryData Encrypted for ImpactDisable or Modify Tools