dragonforce

DragonForce is a ransomware group operating an extortion-focused operation that leverages a custom malware and covert C2 channels, including Backdoor.Turn that hides traffic inside Microsoft Teams relay infrastructure. Victims span Manufacturing, Business Services, Technology, Construction, and Healthcare, with the United States, United Kingdom, Germany, Canada, and Italy the countries most frequently affected. Recent reporting shows a pattern of large-scale data exfiltration accompanying breaches; for example Gelatissimo's breach involved DragonForce claiming to have stolen 352.42 GB of sensitive employee data.

Sectors: Manufacturing, Business Services, Technology · Countries: US, GB, DE