Bleepingcomputer Medusa and DragonForce Ransomware Exploit RMM Tools in 2025 UK Attacks
Article Content
Browse articles 
In 2025, ransomware groups Medusa and DragonForce targeted UK organizations by exploiting three critical vulnerabilities in the SimpleHelp Remote Monitoring and Management platform. These vulnerabilities (CVE-2024-57726, CVE-2024-57727, CVE-2024-57728) allowed unauthorized access through trusted third-party vendors and Managed Service Providers.
Ask AI about this cluster
Answers cite the sources they use
Updated 217d ago How this analysis works
More articles in this cluster (8)
Following this threat?
Track DragonForce, Marks & Spencer and CVE-2024-57726 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Emerging EDR Killer Tool Targeting Ransomware Groups A new malicious tool, referred to as the EDR killer, is being actively used by at least eight ransomware groups, including Blacksuit and Medusa, to disable endpoint detection and response (EDR) solutions. This tool is believed to be an evolution of the EDRKillShifter developed by RansomHub, which allows ransomware… 
[DRAGONFORCE] Ransomware Attacks Target Community Property Management and Owen Leigh Optometry On September 16, 2026, the DRAGONFORCE ransomware group listed two organizations on a leak site: Community Property Management in the U.S. and Owen Leigh Optometry in the U.K. Community Property Management is reported to have over 200 GB of data claimed as stolen, while Owen Leigh Optometry's alleged data exfiltration…