Active ransomware operator
← All groupsDRAGON FORCE
aka dragonforce · 0 victims indexed
At a glance
- Status
- active
- Aliases
- dragonforce
- First seen
- —
- Last activity
- —
- Onion sites
- 1 known endpoint
About
References
8 linksExternal sources curated by the MISP threat-intel community.
- ransomlook.io/group/dragonforce
- ransomware.live/group/dragonforce
- sentinelone.com/blog/dragonforce-ransomware-gang-from-hacktivists-to-high-street-extortionists/
- barracuda.com/blog/dragonforce-ransomware-cartel-vs--everybody
- secureworks.com/blog/ransomware-groups-evolve-affiliate-models
- reuters.com/business/retail-consumer/ms-cyberattack-was-carried-out-by-dragonforce-chairman-says-2025-07-08/
- ft.com/content/22cb54ef-1611-4aef-b671-16316280e3fb
- scworld.com/brief/dragonforce-victimization-on-the-rise-report-finds
Recent victims
Loading…
Onion infrastructure
1 known- http://z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion
Source
Updated recentlyData on this page is sourced from the group's own leak posts, cross-checked with public ransomware trackers (RansomLook, ransomware.live, RansomWatch), MITRE ATT&CK, and our own Tor and Telegram crawlers. This is a public observatory page — share freely.
