Ransomware Intelligence

Ransomware needs a way in. Stolen credentials are the cheapest one.

Check Your Exposure

DragonForce Ransomware Group

Ransomware group profile

395Victims
MalaysiaSource country
110Impact score
Also Known As
Water Tambanakua

Description

DragonForce is a politically-motivated hacktivist group known for executing cyber attacks in response to geopolitical events. The group employs tactics such as website defacement, data leaks, and DDoS attacks, often targeting entities they ideologically oppose. Their operations are heavily publicized through social media to gain support and amplify their messages.

Key insights

  • •Utilizes website defacement as a tactic to promote political messages.
  • •Involved in data leaks and DDoS attacks against targeted entities.
  • •Rapidly exploits newly disclosed vulnerabilities for conducting attacks.
  • •Employs sophisticated phishing techniques for initial access.
  • •Known for leveraging social media platforms to publicize their actions.
  • •Uses multi-extortion techniques involving both ransomware and data exposure.
  • •Originally emerged as a pro-Palestine group but evolved into a broader hacktivist campaign.

Threat Level & Status Breakdown

For DragonForce · Based on incidents in selected period

2.9threat level
Aggressiveness7/ 10
Lethality0.1/ 10
Criticality1.5/ 10

Status Breakdown

Data Leaked2.3%9
Claimed97.7%386
First seenOct 2025
Last seenOct 2026
Avg ransom—
Payment rate—
Statusactive
Sophistication0
Last updatedOct 8, 2026

Recent activity

Monthly attack count for DragonForce in the selected period

395Total attacks
65peak in Apr
30.4avg / month
↓ 13 vs first month
OctNovDecJanFebMarAprMayJunJulAugSepOct020406080

Intelligence

IOCs, YARA/Sigma rules, and related families for DragonForce

  1. 2915b3f8b703eb744fc54c81f4a9c67f
  2. 9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507
  3. 7bdbd180c081fa63ca94f9c22c457376
  4. a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91
  5. feab413f86532812efc606c3b3224b7c7080ae4aa167836d7233c262985f888c
  6. 3a6d5694eec724726efa3327a50fad3efdc623c08d647b51e51cd578bddda3da
  7. b9bba02d18bacc4bc8d9e4f70657d381568075590cc9d0e7590327d854224b32
  8. d54bae930b038950c2947f5397c13f84
  9. 196c08fbab4119d75afb209a05999ce269ffe3cf
  10. 9a218d69ecafe65eae264d2fdb52f1aa
  11. d44071f255785c73909d64f824331ebf
  12. b571e60a6d2d9ab78da1c14327c0d26f34117daa
  13. d626eb0565fac677fdc13fb0555967dc31e600c74fbbd110b744f8e3a59dd3f9
  14. 1250ba6f25fd60077f698a2617c15f89d58c1867339bfd9ee8ab19ce9943304b
  15. b97812a2e6be54e725defbab88357fa2
  16. 6c755a742f2b2e5c1820f57d0338365f
  17. 3c311cabe7de6a8c104f8f10541d392d
  18. 068fd2d209c0bbb0c6fc14e88d63f92441163233
  19. ad4f0428fc9290791d550eeddf171aff046c4c2c
  20. eada05f4bfd4876c57c24cd4b41f7a40ea97274c
  21. 9db8f7378e2df01c842cfcb617e64475
  22. 572d88c419c6ae75aeb784ceab327d040cb589903d6285bbffa77338111af14b
  23. 3094bd501c2e4630d06f72453ec6d173
  24. 0ec84f5912b540618695397211189ebb
  25. b5a5da09114f1e8443daf13a799f2645c135b0bc
  26. 4b194770f6054c513b5a3821cb94feea58c09d3c
  27. 2db60f0adef14f4ab3573f8309e6fb135f67ed7d
  28. 062264c360b05c6b8a3598b8cd13c72e6cd3b9e34c4ae2c7fc272659599434c3
  29. c44bb3cdee68d40920b9e36f80b9a3361520f17d6e470a56bd08f8c5b9054b10
  30. ddf23db6881e42e65440c26a208c9175ad705c708f0a5d8426a2636bad79777c
  31. ba14c43031411240a0836bedf8c8692b54698e05
  32. cbcb58ffe45c202c11bcf2070496aed6
  33. 9165d4f3036919a96b86d24b64d75d692802c7513f2b3054b20be40c212240a5
  34. f11930cb70556941b6e3c8530956f1381a4cdbd1e3fe8e9f363487a73b45a9c0
  35. e6309fdb03313dd1b62467684a49692de5c27bbc3c17e65e2010cfbf686a4bf3
  36. e10361a11f8a7f232ac3cb2125c1875a0a69a3e4
  37. e1c0482b43fe57c93535119d085596cd2d90560a
  38. 9479a5dc61284ccc3f063ebb38da9f63400d8b25d8bca8d04b1832f02fac24de
  39. 0d2619844a3ab68ee18c3a4768b10e6b8aea31143023277883b7ff9f7a9e55ca
  40. 7f624cfb74685effcb325206b428db2be8ac6cce7b72b3edebbe8e310a645099
  41. 5d6b9e80e12bfc595d4d26f6afb099b3cb471dd4
  42. a179c4093d05a3e1ee73f6ff07f994aa
  43. d4de7d7990114c51056afeedb827d880549d5761aac6bdef0f14cb17c25103b3
  44. 88169b1d4778ed6c5fda97375efb5b9171ea52649c8715bb449801c39bce4ad4
  45. 82b336cd120ef07d8df5a3e3fa082bcca8b5c0a3481fae78cb5dd29072979f69
  46. 5c54bd1aa2abf024f53490b7d93101496b5842a5a81a51955fe7f1d5e4281409
  47. f59f4be06c9d1a94d44d1f6a6afd4ad6d532cb47
  48. b3e0785dbe60369634ac6a6b5d241849c1f929de
  49. a4bdd6cef0ed43a4d08f373edc8e146bb15ca0f9
  50. 81185dd73f2e042a947a1bf77f429de08778b6e9
  51. 0b22b6e5269ec241b82450a7e65009685a3010fb
  52. e4a4fc96188310b7b07e7c0525b5c0aa
  53. 2dd7cd2bf15eec7d62689435fca9c49c
  54. 2f7cef4fdedf5393a5485ef4e3b718a56052184193b9833220b04930402dc96d
  55. eba5ab01fda80fdb60e95d3ef6bce88c
  56. acc7e93e31065c3c8a2c307ca7a8de2c482a204b
  57. 2797ce055d37f9ea23080498584979b31fbf1f178d989d00c50f0cbbc93c6cc9
  58. 4c162edf734d12e0d6bfee3b7df9bef7
  59. f75396aebfd1162ea13835b3bd7c2a2d6d320bf3
  60. 8f154ca4a8ee50dc448181afbc95cfd7
  61. 1d70020ddf6f29638b22887947dd5b9c
  62. 5a936250411bf5709a888db54680c131e9c0f40ff4ff04db4aeda5443481922f
  63. 987ad5aa6aee86f474fb9313334e6c9718d68daf
  64. 4f5d4e9d1e3b6a46f450ad1fb90340dfd718608b
  65. 8c8c93a6b6c6d6e632a54877fc1a209e
  66. 023d722cbbdd04e3db77de7e6e3cfeabcef21ba5b2f04c3f3a33691801dd45eb
  67. 7310d6399683ba3eb2f695a2071e0e45891d743b
  68. 3eff7826b6eea73b0206f11d08073a68
  69. 578b1b0f46491b9d39d21f2103cb437bc2d71cac
  70. 7f6421cdf6355edfdcbddadd26bcdfbf984def301df3c6c03d71af8e30bb781f
  71. b47d1618177b6bc219b8734cd02f9cf7be7aff43
  72. 7126b9932dc0cdfe751340edfa7c4a14b69262eb1afd0530e6d1fdb2e25986dd
  73. 95d277791a9485a3e5c94bb2cdecc730
  74. e164bbaf848fa5d46fa42f62402a1c55330ef562
  75. 3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab
  76. 2833c82055bf2d29c65cd9cf6684449a
  77. a53a9ca8a074c7108f8412c3f8c1fc5d
  78. 65c2388b0afb1d1f1860bb887456d8d6cd8b5645
  79. ea8c8f834523886b07d87e85e24f124391d69a738814a0f7c31132b6b712ed65
  80. 8f569641691ecb3888cd4c11932a5b8e13f04b07
  81. 06177810d61a69f34091cc9689b813740d4c260f
  82. e14ba0fb92e16bb7db3b1efac4b13aee178542c6994543e7535d8efaa589870c
  83. a768244ca664349a6d1af84a712083c0
  84. 39300863bcaad71e5d4efc9a1cae118440aa778f
  85. c3804d1329b55a37bfa2f835e1e9bbc7bdb2b260f8e3627c06e02c9f52685d44
  86. 7eec7d07587112777016e5742c0d002d7e64a3e1fe7bde82fed8f65e3663456a
  87. 054a32d6033b1744dca7f49b2e466ea2
  88. c85c9a09cd1cb1691da0d96772391be6ddba3555
  89. 67d17ca90880b448d5c3b40f69cec04d3649f170
  90. e1c371c7c39c16d208bcbaa5b5d0714df696e6ef68b95a880673a904527c8b96
  91. 3073af95dfc18361caebccd69d0021a2
  92. 75612233d32768186d0557dd39abbbd3284a2a29
  93. 299e6791e4eb85617c4fab7f27ac53fb70cd038671f011007831b558c318b369
  94. 2b4b11d3ecffd82ed44db652cdd65733224f8e34
  95. 6285d32a9491a0084da85a384a11e15e203badf67b1deed54155f02b7338b108
  96. 54547180a99474b0dba289d92c4a8f3eea78b531
  97. 75f85caea52fe5a124fa77e2934abd3161690add
  98. bcfac98117d9a52a3196a7bd041b49d5ff0cfb8c
  99. 82ed942a52cdcf120a8919730e00ba37619661a3
  100. 6bc8e3505d9f51368ddf323acb6abc49
  101. 16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0
  102. b7703a59c39a0d2f7ef6422945aaeaaf061431af0533557246397551b8eed505
  103. df6cb5199c272c491b3a7ac44df6c4c279d23f7c09daed758c831b26732a4851
  104. dffd6021bb2bd5b0af676290809ec3a53191dd81c7f70a4b28688a362182986f
  105. ab7d8832e35bba30df50a7cca7cefd9351be4c5e8961be2d0b27db6cd22fc036
  106. a4dfa099e1f52256ad4a3b2db961e158832b739126b80677f82b0722b0ea5e59
  107. 62cd46988f179edf8013515c44cbb7563fc216d4e703a2a2a249fe8634617700
  108. 330730d65548d621d46ed9db939c434bc54cada516472ebef0a00422a5ed5819
  109. 07ab218d5c865cb4fe78353340ab923e24a1f2881ec7206520651c5246b1a492
  110. ee4fc26e3ec51ce2fc260583cdc94c40b1af3dae
  111. 0a0a9f2a6772942557ab5355d76af442f8f65e01
  112. 7844c0c39d820d373569bbc1c8dfa8ee
  113. 65a8e27d8879283831b664bd8b7f0ad4
  114. 9e82ee5bde6b5d29281a3c280e6d1f2e
  115. 85484f00d81ac2e7dad712e67a6fcd10
  116. 2e977e97646d5ee5999ac5c8b138c7e240e431b1
  117. d26171b8ecb3cf1b140d062c0274cc6ee125a318d74e2d5e19699213dca3ca9a
  118. 4b5229b3250c8c08b98cb710d6c056144271de099a57ae09f5d2097fc41bd4f1
  119. cd54780ee2213a05468fa0d24eedd576
  120. 80e3a04fa68be799b3c91737e1918f8394b250603a231a251524244e4d7f77d9
  121. 05f1a39c0902297debceb4c9c4c6674c
  122. 31c3574456573c89d444478772597db40f075e25c67b8de39926d2faa63ca1d8
  123. edd1be036b00de9a2a09a03d8e0e8ec392c5ee7b
  124. dd475afd948cc22caa2a0f934d0aec52
  125. 770c1dc157226638f8ad1ac9669f4883
  126. 1f5ae3b51b2dbf9419f4b7d51725a49023abc81c
  127. 229e073dbcbb72bdfee2c244e5d066ad949d2582
  128. 343220b0e37841dc002407860057eb10dbeea94d
  129. ae2967d021890a6a2a8c403a569b9e6d56e03abd
  130. c98e394a3e33c616d251d426fc986229ede57b0f
  131. f710573c1d18355ecdf3131aa69a6dfe8e674758
  132. fc75a3800d8c2fa49b27b632dc9d7fb611b65201
  133. 3a514e164db30acdb3063eb79a23aa4f
  134. 312ca1a8e35dcf5b80b1526948bd1081fed2293b31d061635e9f048f3fe5eb83
  135. c844d02c91d5e6dc293de80085ad2f69b5c44bc46ec9fdaa4e3efbda062c871c
  136. d67a475f72ca65fd1ac5fd3be2f1cce2db78ba074f54dc4c4738d374d0eb19c7
  137. 01f1e82d4c2b04a4652348fb18bb480396db2229c4fd22d2be1ea58e6bf4a570
  138. d06b5a200292fedcfb4d4aecac32387a2e5b5bb09aaab5199c56bab3031257d6
  139. ed7c78250305f2fef222612285622fbebdf77dfd
  140. 7db52047c72529d27a39f2e1a9ffb8f1f0ddc774
  141. 577b110a8bfa6526b21bb728e14bd6494dc67f71
  142. 29baab2551064fa30fb18955ccc8f332bd68ddd4
  143. 011894f40bab6963133d46a1976fa587a4b66378
  144. ba1be94550898eedb10eb73cb5383a2d1050e96ec4df8e0bf680d3e76a9e2429
  145. 94f73b5dc06ba6705fcef3e759413a747049c2949a0c2e44afc03b2f9989cf73
  146. 91acae0fff5ecbf0b65c3ddebb5a824a
  147. 8a193db0ff08237f63c036d422f52276a4e575476763dc391455ed5b12269c07
  148. 3a6e2c775c9c1060c54a9a94e80d923a
  149. e67e7b8e0fb6baff4f25bb05dd5a5e21
  150. b10129c175c007148dd4f5aff4d7fb61eb3e4b0ed4897fea6b33e90555f2b845
  151. 2c26bb95a938b6a5063bf4f95942440a0583d52bb129ea272584fc94906f5e86
  152. 491872a50b8db56d6a5ef1ccabe8702fb7763da4fd3b474d20ae0c98969acfe5
  153. bc6fb2eab9ed8d9eb405f6186d08e85be8b1308d207970cc41cf90477aa79064
  154. e84270afa3030b48dc9e0c53a35c65aa
  155. df5ab9015833023a03f92a797e20196672c1d6525501a9f9a94a45b0904c7403
  156. 4a34bbad85312ef34b60818a47f7b5bb8e9a7e26
  157. c7d7f0725df47272a7dd40450ae1e833317ba8f9
  158. c9694483c9fc15b2649359dfbd8322f0f6dd7a0a7da75499e03dbc4de2b23cad
  159. 90c8b7f89c8a23b7a056df8fd190263ca91fe4e27bda174a9c268adbfc5c0f04
  160. 2732fc2bb7b6413c899b6ac1608818e4ee9f0e5f1d14e32c9c29982eecd50f87
  161. 57f825a556330e94d12475f21c2245fa1ee15aedd61bffb55587b54e970f1aad
  162. 839b3a46abee1b234c4f69acd554e494c861dcc533bb79bd0d15b9855ae1bed7
  163. 773c935a13ab49cc4613b30e8d2a75f1bde3b85b0bba6303eab756d70f459693
  164. 67534c144a7373cacbd8f9bd9585a2b74ddbb03c2c0721241d65c62726984a0a
  165. 8c0606db237cfa33fa3fb99a56072063177b61fa2c8873ed6af712bba2dc56d9
  166. d0a63e059ed2c921c37c83246cdf4de0c8bc462b7c1d4b4ecd23a24196be7dd7
  167. 1e074d9dca6ef0edd24afb2d13ca4429def5fc5486cd4170c989ef60efd0bbb0
  168. a6307aad70195369e7ca5575f1ab81c2fd82de2fe561179e38933f9da28c4850
  169. a583bdf46f901364ed8e60f6aadd2b31be12a27ffccecc962872bc73a9ffd46c
  170. e502b8d617a2cd9bfa41762282a0ff81
  171. 3403b92056d7645acfb7236824cc58b15e4d5395
  172. 719082b1e5c0d18cc0283e537215b53a864857ac936a0c7d3ddbaf7c7944cf79
  173. c8dc86afd1cd46534f4f9869efaa3b6b9b9a1efaf3c259bb87000702807f5844
  174. 91025d6f02e542f2e37ffce7d0ce8b51
  175. e2d80ef6075556cd23ce0445473c061f200b5dd4
View full IOC feed500 total

TTPs & Attack Vectors

Tools, initial access, and MITRE ATT&CK techniques for DragonForce

CVE-2025-6264
CVE-2025-61155
CVE-2025-59287
CVE-2025-47176
CVE-2025-47171
CVE-2025-1055
CVE-2024-57728
CVE-2024-57727
CVE-2024-57726
CVE-2024-55591
CVE-2024-40766
CVE-2024-37085
CVE-2024-21893
CVE-2024-21887
CVE-2024-21762
CVE-2024-21412
CVE-2024-1709
CVE-2024-1708
CVE-2023-52271
CVE-2023-4966
CVE-2023-46805
CVE-2023-27997
CVE-2023-20269
CVE-2021-44228
CVE-2021-35464
CVE-2015-2291
Discovery

T1083

File and Directory Discovery

Execution

T1005.002

User Execution

Impact

T1486

Data Encrypted for Impact

Victims(200)

BrazilEnergy & Utilitiespetrosul.com.br
Claimed
1 day ago
FranceTechnologyreso.fr
Claimed
1 day ago
TaiwanOtherhec-group.com.tw
Claimed
15 days ago
ThailandManufacturingpjemetal.com
Claimed
15 days ago
FranceOtherpolyresine.com
Claimed
15 days ago
United StatesHealthcarearizonavascular.com
Claimed
15 days ago
United KingdomHealthcareowenleighoptometry.co.uk
Claimed
23 days ago
United StatesOthercpm1.com
Claimed
23 days ago
United StatesRetail & E-Commercemedicaldepartmentstore.com
Claimed
28 days ago
United StatesManufacturinghomewoodsales.com
Claimed
about 1 month ago
United StatesProfessional Servicesnorwoodlegal.com
Claimed
about 1 month ago
ArgentinaOtherarsrenacer.com
Data Leaked
18 days ago
United StatesManufacturingrubbermill.com
Data Leaked
about 1 month ago
ArgentinaTechnologycriba.com.ar
Claimed
about 2 months ago
BrazilOtherfrato.com
Claimed
about 2 months ago
United Arab EmiratesOtherwozair.com
Claimed
about 2 months ago
CanadaFinancial Servicesbrookviewfinancial.com
Claimed
about 2 months ago
United StatesRetail & E-Commercewinfashion.com
Data Leaked
15 days ago
United StatesProfessional Serviceshoganomidi.com
Claimed
about 2 months ago
United StatesManufacturingrdmachine.com
Claimed
about 2 months ago

Page 1 of 10