Ransomware Intelligence

Latest Research on INC and The Gentlemen Ransomware: Exposed AI Infrastructure

Read the Research

DragonForce Ransomware Group

Ransomware group profile

387Victims
MalaysiaSource country
112Impact score
Also Known As
Water Tambanakua

Description

DragonForce is a politically-motivated hacktivist group known for executing cyber attacks in response to geopolitical events. The group employs tactics such as website defacement, data leaks, and DDoS attacks, often targeting entities they ideologically oppose. Their operations are heavily publicized through social media to gain support and amplify their messages.

Key insights

  • •Utilizes website defacement as a tactic to promote political messages.
  • •Involved in data leaks and DDoS attacks against targeted entities.
  • •Rapidly exploits newly disclosed vulnerabilities for conducting attacks.
  • •Employs sophisticated phishing techniques for initial access.
  • •Known for leveraging social media platforms to publicize their actions.
  • •Uses multi-extortion techniques involving both ransomware and data exposure.
  • •Originally emerged as a pro-Palestine group but evolved into a broader hacktivist campaign.

Threat Level & Status Breakdown

For DragonForce · Based on incidents in selected period

2.9threat level
Aggressiveness7/ 10
Lethality0.1/ 10
Criticality1.5/ 10

Status Breakdown

Data Leaked2.3%9
Negotiating0.3%1
Claimed97.4%377
First seenNov 2025
Last seenOct 2026
Avg ransom—
Payment rate—
Statusactive
Sophistication0
Last updatedOct 27, 2026

Recent activity

Monthly attack count for DragonForce in the selected period

387Total attacks
65peak in Apr
32.3avg / month
↓ 15 vs first month
NovDecJanFebMarAprMayJunJulAugSepOct020406080

Intelligence

IOCs, YARA/Sigma rules, and related families for DragonForce

  1. 2915b3f8b703eb744fc54c81f4a9c67f
  2. 9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507
  3. 7bdbd180c081fa63ca94f9c22c457376
  4. a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91
  5. 97b70e89b5313612a9e7a339ee82ab67
  6. 3a6d5694eec724726efa3327a50fad3efdc623c08d647b51e51cd578bddda3da
  7. b9bba02d18bacc4bc8d9e4f70657d381568075590cc9d0e7590327d854224b32
  8. d44071f255785c73909d64f824331ebf
  9. d626eb0565fac677fdc13fb0555967dc31e600c74fbbd110b744f8e3a59dd3f9
  10. 1250ba6f25fd60077f698a2617c15f89d58c1867339bfd9ee8ab19ce9943304b
  11. b97812a2e6be54e725defbab88357fa2
  12. 6c755a742f2b2e5c1820f57d0338365f
  13. 3c311cabe7de6a8c104f8f10541d392d
  14. ad4f0428fc9290791d550eeddf171aff046c4c2c
  15. eada05f4bfd4876c57c24cd4b41f7a40ea97274c
  16. 9db8f7378e2df01c842cfcb617e64475
  17. 572d88c419c6ae75aeb784ceab327d040cb589903d6285bbffa77338111af14b
  18. 3094bd501c2e4630d06f72453ec6d173
  19. 0ec84f5912b540618695397211189ebb
  20. b5a5da09114f1e8443daf13a799f2645c135b0bc
  21. 40df05b4f04ad093b31c9ca07a559be56a700e49f6051b5cb7462db5f85be8c3
  22. 062264c360b05c6b8a3598b8cd13c72e6cd3b9e34c4ae2c7fc272659599434c3
  23. c44bb3cdee68d40920b9e36f80b9a3361520f17d6e470a56bd08f8c5b9054b10
  24. ba14c43031411240a0836bedf8c8692b54698e05
  25. cbcb58ffe45c202c11bcf2070496aed6
  26. e10361a11f8a7f232ac3cb2125c1875a0a69a3e4
  27. 9479a5dc61284ccc3f063ebb38da9f63400d8b25d8bca8d04b1832f02fac24de
  28. 0d2619844a3ab68ee18c3a4768b10e6b8aea31143023277883b7ff9f7a9e55ca
  29. 7f624cfb74685effcb325206b428db2be8ac6cce7b72b3edebbe8e310a645099
  30. 5d6b9e80e12bfc595d4d26f6afb099b3cb471dd4
  31. d4de7d7990114c51056afeedb827d880549d5761aac6bdef0f14cb17c25103b3
  32. 88169b1d4778ed6c5fda97375efb5b9171ea52649c8715bb449801c39bce4ad4
  33. 82b336cd120ef07d8df5a3e3fa082bcca8b5c0a3481fae78cb5dd29072979f69
  34. 5c54bd1aa2abf024f53490b7d93101496b5842a5a81a51955fe7f1d5e4281409
  35. f59f4be06c9d1a94d44d1f6a6afd4ad6d532cb47
  36. 81185dd73f2e042a947a1bf77f429de08778b6e9
  37. 0b22b6e5269ec241b82450a7e65009685a3010fb
  38. e4a4fc96188310b7b07e7c0525b5c0aa
  39. 2dd7cd2bf15eec7d62689435fca9c49c
  40. 2f7cef4fdedf5393a5485ef4e3b718a56052184193b9833220b04930402dc96d
  41. eba5ab01fda80fdb60e95d3ef6bce88c
  42. acc7e93e31065c3c8a2c307ca7a8de2c482a204b
  43. 2797ce055d37f9ea23080498584979b31fbf1f178d989d00c50f0cbbc93c6cc9
  44. 4c162edf734d12e0d6bfee3b7df9bef7
  45. f75396aebfd1162ea13835b3bd7c2a2d6d320bf3
  46. 8f154ca4a8ee50dc448181afbc95cfd7
  47. 1d70020ddf6f29638b22887947dd5b9c
  48. 5a936250411bf5709a888db54680c131e9c0f40ff4ff04db4aeda5443481922f
  49. 987ad5aa6aee86f474fb9313334e6c9718d68daf
  50. 4f5d4e9d1e3b6a46f450ad1fb90340dfd718608b
  51. 8c8c93a6b6c6d6e632a54877fc1a209e
  52. 023d722cbbdd04e3db77de7e6e3cfeabcef21ba5b2f04c3f3a33691801dd45eb
  53. 7310d6399683ba3eb2f695a2071e0e45891d743b
  54. b47d1618177b6bc219b8734cd02f9cf7be7aff43
  55. 7126b9932dc0cdfe751340edfa7c4a14b69262eb1afd0530e6d1fdb2e25986dd
  56. 95d277791a9485a3e5c94bb2cdecc730
  57. 3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab
  58. 65c2388b0afb1d1f1860bb887456d8d6cd8b5645
  59. 4c4ae06411c7f254236f0494e71105ae
  60. 7eec7d07587112777016e5742c0d002d7e64a3e1fe7bde82fed8f65e3663456a
  61. c85c9a09cd1cb1691da0d96772391be6ddba3555
  62. 67d17ca90880b448d5c3b40f69cec04d3649f170
  63. e1c371c7c39c16d208bcbaa5b5d0714df696e6ef68b95a880673a904527c8b96
  64. 75612233d32768186d0557dd39abbbd3284a2a29
  65. 54547180a99474b0dba289d92c4a8f3eea78b531
  66. 75f85caea52fe5a124fa77e2934abd3161690add
  67. bcfac98117d9a52a3196a7bd041b49d5ff0cfb8c
  68. 82ed942a52cdcf120a8919730e00ba37619661a3
  69. 6bc8e3505d9f51368ddf323acb6abc49
  70. 16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0
  71. b7703a59c39a0d2f7ef6422945aaeaaf061431af0533557246397551b8eed505
  72. df6cb5199c272c491b3a7ac44df6c4c279d23f7c09daed758c831b26732a4851
  73. 9e82ee5bde6b5d29281a3c280e6d1f2e
  74. 85484f00d81ac2e7dad712e67a6fcd10
  75. 2e977e97646d5ee5999ac5c8b138c7e240e431b1
  76. d26171b8ecb3cf1b140d062c0274cc6ee125a318d74e2d5e19699213dca3ca9a
  77. cd54780ee2213a05468fa0d24eedd576
  78. 31c3574456573c89d444478772597db40f075e25c67b8de39926d2faa63ca1d8
  79. edd1be036b00de9a2a09a03d8e0e8ec392c5ee7b
  80. dd475afd948cc22caa2a0f934d0aec52
  81. 229e073dbcbb72bdfee2c244e5d066ad949d2582
  82. fc75a3800d8c2fa49b27b632dc9d7fb611b65201
  83. c844d02c91d5e6dc293de80085ad2f69b5c44bc46ec9fdaa4e3efbda062c871c
  84. d67a475f72ca65fd1ac5fd3be2f1cce2db78ba074f54dc4c4738d374d0eb19c7
  85. 01f1e82d4c2b04a4652348fb18bb480396db2229c4fd22d2be1ea58e6bf4a570
  86. 7db52047c72529d27a39f2e1a9ffb8f1f0ddc774
  87. 577b110a8bfa6526b21bb728e14bd6494dc67f71
  88. 29baab2551064fa30fb18955ccc8f332bd68ddd4
  89. 011894f40bab6963133d46a1976fa587a4b66378
  90. ba1be94550898eedb10eb73cb5383a2d1050e96ec4df8e0bf680d3e76a9e2429
  91. 91acae0fff5ecbf0b65c3ddebb5a824a
  92. 8a193db0ff08237f63c036d422f52276a4e575476763dc391455ed5b12269c07
  93. 3a6e2c775c9c1060c54a9a94e80d923a
  94. e67e7b8e0fb6baff4f25bb05dd5a5e21
  95. b10129c175c007148dd4f5aff4d7fb61eb3e4b0ed4897fea6b33e90555f2b845
  96. e84270afa3030b48dc9e0c53a35c65aa
  97. df5ab9015833023a03f92a797e20196672c1d6525501a9f9a94a45b0904c7403
  98. 4a34bbad85312ef34b60818a47f7b5bb8e9a7e26
  99. c7d7f0725df47272a7dd40450ae1e833317ba8f9
  100. d0a63e059ed2c921c37c83246cdf4de0c8bc462b7c1d4b4ecd23a24196be7dd7
  101. 1e074d9dca6ef0edd24afb2d13ca4429def5fc5486cd4170c989ef60efd0bbb0
  102. e502b8d617a2cd9bfa41762282a0ff81
  103. 3403b92056d7645acfb7236824cc58b15e4d5395
  104. 91025d6f02e542f2e37ffce7d0ce8b51
  105. e2d80ef6075556cd23ce0445473c061f200b5dd4
  106. bd1f381e5a3db22e88776b7873d4d2835e9a1ec620571d2b1da0c58f81c84a56
  107. 3755718db9d33f4aba2563de454d4530a308b41b1096c904102d08e2101f2020
  108. 8f31f69f88a75d5faab4f94cfc2ec8a649fe1a24
  109. 7ceeb2208a50b1ef61fdec935d66e992
  110. 24e8ef41ead6fc45d9a7ec2c306fd04373eaa93bbae0bd1551a10234574d0e07
  111. b16b490ef3e713029ae65273c84ca2c335fcd21a
  112. beadd181d0dbbbe36e0e311c5211a5dd
  113. 716cb58d66e5a59b53c90d427d17c5cc53a68f80
  114. dca4102fba483bf0060427e0d583a1f61d079bf0754db4d61ff2969cc1bc3474
  115. 1eef40b82b5e84b44d33c0a6bb7a8cbea086db321bf455f0e6dab8336c6af50b
  116. 1ccf8baf11427fae273ffed587b41c857fa2d8f3d3c6c0ddaa1fe4835f665eba
  117. 77962a384d251f0aa8e3008a88f206d6cb1f7401c759c4614e3bfe865e3e985c
  118. db8bcb8693ddf715552f85b8e2628f060070f920
  119. 017933be6023795e944a2a373e74e2cc6885b5c9bc1554c437036250c20c3a7d
  120. 15e9255a3e3401e5f6578d2ac45b7850
  121. 5a88a15a1d764e635462f78a0cd958b17e6d22c716740febc114a408eef66705
  122. 3b80a13199564e3d8a9d26e14defabee136638f8
  123. 018494565257ef2b6a4e68f1c3e7573b87fc53bd5828c9c5127f31d37ea964f8
  124. 92b4bbaffbe7060d5d0760ba50d51ce8
  125. 854512af19cba0d1048b9686e3383d9c5a05d316bb6d09cf2af7e93b5f587349
  126. 4ec90ff015ae2e6b3a95593e0eeed4aa53e4bf5c
  127. 39af13642e6ecaf97c4b36eb81fa809f
  128. b70e78971fc44f8413447139afe777f19fd1b0d203f2d40f66f41cd6100a1c95
  129. dfa652d5f4551af2771c9329d42185bc36cc26ef
  130. e398bbf7cb5533430fa866627e28cbc0730b4f5a887f3f6b8f2f4c2b4dc23ac3
  131. 34dbabba981f96b24626b38aa38b5db8
  132. c6c8547ed95bb1df1212e8b893bbc4cef3693154
  133. e06520c65bf27d9110d68ecc0de0e0824c3a99be080ead1a5b5be8fd2a26d12d
  134. 90af0ff317f607f5c4fda1fcc4add009
  135. aa62ef7097eb0608ef19920c0c05689c
  136. 8a1170e72613a5bc12f5dca8b3543979
  137. 11a03b3228fad703900c3d9319b96af7
  138. 143f8900124e3d68106f756df7de3619c6c824a0
  139. 75451e62734117920325062fc103e676e0d549402b6be23feab0cbc730845ec1
  140. 5be4523a489ac67be607ece30a2ad40c2ccfdb00
  141. 7450233163d7015776d89db65bd428d01e92185e
  142. ac5459bb2d5e277986f2b1f87696a5d87919768c97acff9a13813f82150c518a
  143. 9ddcdc92612426dfd39047eeda3846a165052495b89b6eada0ad63c1baa0a9ae
View full IOC feed500 total

TTPs & Attack Vectors

Tools, initial access, and MITRE ATT&CK techniques for DragonForce

CVE-2025-6264
CVE-2025-61155
CVE-2025-59287
CVE-2025-47176
CVE-2025-47171
CVE-2025-1055
CVE-2024-57728
CVE-2024-57727
CVE-2024-57726
CVE-2024-55591
CVE-2024-40766
CVE-2024-37085
CVE-2024-21893
CVE-2024-21887
CVE-2024-21762
CVE-2024-21412
CVE-2024-1709
CVE-2024-1708
CVE-2023-52271
CVE-2023-4966
CVE-2023-46805
CVE-2023-27997
CVE-2023-20269
CVE-2021-44228
CVE-2021-35464
CVE-2015-2291
Discovery

T1083

File and Directory Discovery

Execution

T1005.002

User Execution

Impact

T1486

Data Encrypted for Impact

Victims(200)

United StatesEnergy & Utilitiesinsidepassageelectric.org
Claimed
2 days ago
UkraineTechnologyzhito.com
Claimed
1 day ago
United StatesManufacturinglaneequipment.com
Claimed
14 days ago
CanadaEducationcmu.ca
Claimed
16 days ago
PeruManufacturingtqc.com.pe
Claimed
17 days ago
TaiwanManufacturingtexma.com.tw
Claimed
18 days ago
BrazilEnergy & Utilitiespetrosul.com.br
Claimed
20 days ago
FranceTechnologyreso.fr
Claimed
20 days ago
United StatesTechnologyoakgrovetech.com
Negotiating
11 days ago
TaiwanOtherhec-group.com.tw
Claimed
about 1 month ago
ThailandManufacturingpjemetal.com
Claimed
about 1 month ago
FranceOtherpolyresine.com
Claimed
about 1 month ago
United StatesHealthcarearizonavascular.com
Claimed
about 1 month ago
United KingdomHealthcareowenleighoptometry.co.uk
Claimed
about 1 month ago
United StatesOthercpm1.com
Claimed
about 1 month ago
United StatesRetail & E-Commercemedicaldepartmentstore.com
Claimed
about 2 months ago
United StatesManufacturinghomewoodsales.com
Claimed
about 2 months ago
United StatesProfessional Servicesnorwoodlegal.com
Claimed
about 2 months ago
ArgentinaOtherarsrenacer.com
Data Leaked
about 1 month ago
United StatesManufacturingrubbermill.com
Data Leaked
about 2 months ago

Page 1 of 10