Tag: dragonforce

2 Attack Reports | 0 Vulnerabilities

Attack reports

DragonForce Ransomware Group is Targeting Saudi Arabia

DragonForce ransomware has targeted organizations in Saudi Arabia, with a significant data leak from a Riyadh real estate and construction company. The group exfiltrated over 6 TB of data, setting a deadline just before Ramadan. DragonForce operates on a RaaS model, offering high commission rates f…
ransomware
construction
raas
dragonforce
2025-02-27
saudi arabia
dark web
real estate
Published: February 27, 2025
Linked vulnerabilities : CVE-2024-21887, CVE-2023-46805, CVE-2021-44228, CVE-2024-21412, CVE-2024-21893
Downloadable IOCs: 17

Inside the Dragon: DragonForce Ransomware Group

In this blog, Group-IB delves into the inner workings of the DragonForce ransomware group. Discovered in August 2023, DragonForce has been targeting companies in critical sectors using a variant of a leaked LockBit3.0 builder, and more recently in July 2024 with their own variant of ransomware. Dr…
2024-09-27
dragonforce
lockbit3.0
Published: September 27, 2024
Downloadable IOCs: 5
Click here to see more Attack Reports