Dragonforce

☆ pin

Also known as DragonForce, Hackledorb

Reports

147

First seen

Sep 8, 2025

Last seen

Aug 13, 2026

Motivation

Financial

Relationships

Filled ◆ = CVE exploited in the wild. Entities that appear together in Signalis reporting — co-mention, not confirmed collaboration. Reports naming many actors at once (weekly roundups) are excluded from relationship edges.

Targeting

Sectors

Manufacturing ×20 Professional Services ×17 Other ×14 Technology ×11 Hospitality ×8 Healthcare ×8 Retail & E-commerce ×7 Financial Services ×5

Victim regions

×3

×32

United States×32

United Kingdom×7

United Arab Emirates×5

India×4

Canada×4

Italy×3

Hong Kong SAR China×3

China×3

Victim country, only when stated. Corpus is predominantly English-language reporting, so US/EU coverage is overweighted relative to true victim distribution.

Top ATT&CK techniques

T1486 Data Encrypted for Impact ×12T1190 Exploit Public-Facing Application ×10T1566 Phishing ×9T1078 Valid Accounts ×6T1068 Exploitation for Privilege Escalation ×6T1562.001 Impair Defenses: Disable or Modify Tools ×6T1219 Remote Access Software ×5T1021 Remote Services ×5T1059 Command and Scripting Interpreter ×5T1110 Brute Force ×4T1133 External Remote Services ×4T1195 Supply Chain Compromise ×4

Indicators

domain ×284filename ×123cve ×120ip_v4 ×100hash_md5 ×41hash_sha1 ×25hash_sha256 ×19registry_key ×5email ×4url ×2bitcoin_address ×1

Indicator values are available on Pro and via the API.

Recent reports

Medium

Dragonforce

Relationships

Targeting

Top ATT&CK techniques

Indicators

Associated CVEs

Recent reports

ThreatsDay: GhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 17 More Stories

Dragonforce publishes GB Group S.A as ransomware victim

Dragonforce publishes Quest Personal Care Global as ransomware victim

Weekly Security Recap: AI Model Poisoning, Metabase 0-Day, Supply-Chain Worms, and Router Backdoors

IT threat evolution in Q2 2026: Ransomware, miners, and vulnerability exploitation

Dragonforce ransomware gang publishes Parkmungak as victim

Dragonforce publishes Primary Eye Care as ransomware victim

Dragonforce publishes P.A. Inc. (Performance Alloys) as ransomware victim

Dragonforce publishes Mike Graham Heating and Air Conditioning as ransomware victim

Cyber Brief July 2026 – EU Threat Intelligence Summary

Analysis of Incidents at Brazilian Educational Institutions

Dragonforce publishes Baicizhan as ransomware victim

Dragonforce publishes TUI China as ransomware victim

Dragonforce publishes Lamont Pridmore as ransomware victim

Dragonforce claims RUS Industrial victim on ransomware.live

Dragonforce publishes MBM Law as ransomware victim

Dragonforce claims Katathani Phuket Beach Resort in ransomware extortion post

Dragonforce publishes Syntron Bioresearch as ransomware victim

Dragonforce ransomware gang publishes Deluxe Medical Supply as victim

Dragonforce publishes ID Engineering & Automated Systems as ransomware victim

Dragonforce publishes Koshkaryan Law Group as ransomware victim

Dragonforce publishes One Community FCU data breach

Dragonforce publishes NewNet S.A. as ransomware victim

Dragonforce publishes Petrini Valores as ransomware victim

DragonForce publishes Sinai Grand Casino as ransomware victim

Dragonforce publishes Kee Wah Bakery as ransomware victim

Dragonforce publishes Southport Outdoor Living as ransomware victim

Dragonforce publishes Metro Design Centre as new victim

Dragonforce publishes North Atlantic Engineering Consultants as ransomware victim

Dragonforce ransomware gang claims Heritage Mechanical LLC as new victim