Researchers Breakdown DragonForce Ransomware Along with Decryptor for ESXi and Windows Systems

Cybersecuritynews •Tushar Subhra Dutta • January 14, 2026

DragonForce is the latest ransomware brand to move from noisy forum posts to full RaaS operations, targeting both Windows and VMware ESXi environments. First seen in December 2023 on BreachForums, the group advertises stolen data and uses a dark web blog to pressure victims. The early leak post revealed the new cartel-style operation. The group […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

DragonForce Ransomware Targets Windows and ESXi Systems DragonForce ransomware has transitioned to Ransomware-as-a-Service (RaaS), targeting Windows and VMware ESXi environments. First identified in December 2023, the group utilizes a dark web blog to pressure victims and advertises stolen data. The operation is characterized by a cartel-style structure. 2 sources 52

Extracted Entities

Researchers Breakdown DragonForce Ransomware Along with Decryptor for ESXi and Windows Systems

The full story

Extracted Entities

Attack Types (1)

Platforms (2)

Ransomware Groups (1)