ThreatCluster

DragonForce Emerges as Conti-Linked Ransomware Cartel

First seen 6 Nov 2025, 17:37 UTC •Infosecurity-MagazineIndustrialcyber.Co •63

Article Content

Browse articles
ThreatCluster

DragonForce, a new ransomware operation derived from Conti's leaked source code, has emerged with a cartel-like structure. The group retains Conti's core encryption and network-spreading capabilities while recruiting affiliates to create branded variants of its malware. This shift marks a transition from a standard ransomware-as-a-service model to a more organized cartel approach.

How this analysis works

Extracted Entities

1 / 2