DragonForce Ransomware Targets Windows and ESXi Systems
Article Content
Browse articles 
DragonForce ransomware has transitioned to Ransomware-as-a-Service (RaaS), targeting Windows and VMware ESXi environments. First identified in December 2023, the group utilizes a dark web blog to pressure victims and advertises stolen data. The operation is characterized by a cartel-style structure.
Ask AI about this cluster
Answers cite the sources they use
Updated 214d ago How this analysis works
More articles in this cluster (2)
Following this threat?
Track DragonForce in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Emerging EDR Killer Tool Targeting Ransomware Groups A new malicious tool, referred to as the EDR killer, is being actively used by at least eight ransomware groups, including Blacksuit and Medusa, to disable endpoint detection and response (EDR) solutions. This tool is believed to be an evolution of the EDRKillShifter developed by RansomHub, which allows ransomware… 
[DRAGONFORCE] Ransomware Attacks Target Community Property Management and Owen Leigh Optometry On September 16, 2026, the DRAGONFORCE ransomware group listed two organizations on a leak site: Community Property Management in the U.S. and Owen Leigh Optometry in the U.K. Community Property Management is reported to have over 200 GB of data claimed as stolen, while Owen Leigh Optometry's alleged data exfiltration…