Hunt / dragonforce
DragonForce
30victims, 90d
Oct 27last post
0reports about them
-techniques with a rule
0indicators
Nothing published that we can read says how DragonForce gets in or what it runs once inside. This page is who they hit, and that is all we have. If you know of a public write-up, it belongs here.
Who they hit
| Posted | Victim | Country |
|---|---|---|
| 2026-10-27 | Zhito Technology | UA |
| 2026-10-26 | Inside Passage Electric Cooperative, Inc | US |
| 2026-10-17 | oakgrovetech | US |
| 2026-10-14 | Lane Equipment | US |
| 2026-10-12 | Canadian Mennonite University (CMU) | CA |
| 2026-10-11 | TQC S.A. | PE |
| 2026-10-10 | TEXMA International Co., Ltd | TW |
| 2026-10-07 | Petrosul Distribuidora, Transportadora e Comércio de Combustíveis Ltda. | BR |
| 2026-10-07 | RÉSO | FR |
| 2026-09-24 | winfashion | ?? |
| 2026-09-24 | Arizona Vascular Medical Equipment, Inc | US |
| 2026-09-24 | BMGP Groupe | FR |
Latest 12 of 30, from ransomware.live. These are the group's claims.
Confirmed elsewhere
Victims of DragonForce that a second, independent source also named inside two weeks. How convergence works.
- 2026-08-08 RUS Industrial, LLC leak + notice
Sweep
No indicators. Either nobody has published any for DragonForce, or the reports cite values without marking them as IOCs. package.json