Tag: devman

3 Attack Reports | 0 Vulnerabilities

Attack reports

The DragonForce Cartel: Scattered Spider at the gate

DragonForce, a ransomware-as-a-service group active since 2023, has rebranded as a cartel and formed alliances with groups like Scattered Spider, LAPSUS$, and ShinyHunters. The group uses Conti-derived code and employs BYOVD attacks to terminate processes. DragonForce has expanded its affiliate pro…
social engineering
ransomware
encryption
conti
byovd
dragonforce
affiliate program
mamona
devman
2025-11-05
scattered spider
global
cartel
Published: November 5, 2025
Downloadable IOCs: 0

June 2025 Threat Trend Report on Ransomware

The June 2025 threat analysis reveals an increase in new ransomware samples compared to May. The data is based on detection names from AhnLab and information collected from Dedicated Leak Sites (DLS) of ransomware groups. Statistics cover the past six months, showing the total number of ransomware …
ransomware
raas
threat trends
md5 hashes
affected companies
statistics
safepay
devman
2025-07-16
dls
Published: July 16, 2025
Downloadable IOCs: 0

DEVMAN Ransomware: Analysis of New DragonForce Variant

A new ransomware strain resembling DragonForce but with unique traits has emerged, possibly connected to an entity called DEVMAN. The sample reuses DragonForce code but adds its own elements, including the .DEVMAN file extension. Attribution is unclear, as the ransom note is identical to DragonForc…
ransomware
conti
raas
dragonforce
mamona
2025-07-02
blacklock
devman
Published: July 2, 2025
Downloadable IOCs: 2
Click here to see more Attack Reports