Ransomware needs a way in. Stolen credentials are the cheapest one.

途易旅游 Ransomware Attack

tui.cnRansomed

DragonForceGroup

ChinaCountry

Aug 3, 2026Discovered

Overview

View group profile

Domain

tui.cn

Industry

Hospitality

Country

China

Discovered

28 days ago

Attack date

Aug 3, 2026

Confidence

100%

Severity

Medium

Status

Claimed

Threat group

DragonForce

Total victims

376

First seen

Sep 2025

Last seen

Jul 2026

Group status

active

Sophistication

Impact score

109

Threat level

3.5/10

Aggressiveness9/10

Lethality0.1/10

Criticality1.2/10

Status breakdown

Claimed

this victim

100.0%18

Targeted sectors

Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Hospitality

Known target sector

Country

China

Frequently targeted country

Other victims

View all (394)

Same group · DragonForce

Criba
Argentina
Claimed
Frato
Brazil
Claimed
Wozair
United Arab Emirates
Claimed
Brookview Financial
Canada
Claimed
Hogan Omidi P.C.
United States
Claimed
R&D Machine and Engineering, LLC
United States
Claimed

Group activity

Monthly attacks · DragonForce

376

total · avg 34.2/mo