ThreatCluster

DragonForce Emerges as Conti-Linked Ransomware Cartel

First seen 6 Nov 2025, 17:37 UTC •Infosecurity-MagazineIndustrialcyber.Co •86% similarity •63

Article Content

Browse articles
ThreatCluster

DragonForce, a new ransomware operation derived from Conti's leaked source code, has emerged with a cartel-like structure. The group retains Conti's core encryption and network-spreading capabilities while recruiting affiliates to create branded variants of its malware. This shift marks a transition from a standard ransomware-as-a-service model to a more organized cartel approach.

ThreatCluster AI

Extracted Entities

1 / 2

Community

Browse all →