{
  "slug": "dragonforce",
  "group": "dragonforce",
  "name": "DragonForce",
  "note": null,
  "attck": [],
  "activity": {
    "postings": 30,
    "first": "2026-08-11",
    "last": "2026-10-27",
    "countries": {
      "UA": 1,
      "US": 11,
      "CA": 2,
      "PE": 1,
      "TW": 2,
      "BR": 3,
      "FR": 2,
      "??": 1,
      "TH": 1,
      "AR": 2,
      "GB": 2,
      "AE": 1,
      "PL": 1
    },
    "sectors": {
      "technology": 4,
      "energy": 2,
      "manufacturing": 6,
      "education": 1,
      "consumer": 3,
      "healthcare": 2,
      "unknown": 8,
      "insurance": 1,
      "services": 2,
      "finance": 2
    },
    "recent": [
      {
        "date": "2026-10-27",
        "name": "Zhito Technology",
        "country": "UA",
        "sectors": [
          "technology"
        ],
        "url": "https://www.ransomware.live/id/WmhpdG8gVGVjaG5vbG9neUBkcmFnb25mb3JjZQ"
      },
      {
        "date": "2026-10-26",
        "name": "Inside Passage Electric Cooperative, Inc",
        "country": "US",
        "sectors": [
          "energy"
        ],
        "url": "https://www.ransomware.live/id/SW5zaWRlIFBhc3NhZ2UgRWxlY3RyaWMgQ29vcGVyYXRpdmUsIEluY0BkcmFnb25mb3JjZQ"
      },
      {
        "date": "2026-10-17",
        "name": "oakgrovetech",
        "country": "US",
        "sectors": [
          "technology"
        ],
        "url": "https://www.ransomware.live/id/b2FrZ3JvdmV0ZWNoQGRyYWdvbmZvcmNl"
      },
      {
        "date": "2026-10-14",
        "name": "Lane Equipment",
        "country": "US",
        "sectors": [
          "manufacturing"
        ],
        "url": "https://www.ransomware.live/id/TGFuZSBFcXVpcG1lbnRAZHJhZ29uZm9yY2U"
      },
      {
        "date": "2026-10-12",
        "name": "Canadian Mennonite University (CMU)",
        "country": "CA",
        "sectors": [
          "education"
        ],
        "url": "https://www.ransomware.live/id/Q2FuYWRpYW4gTWVubm9uaXRlIFVuaXZlcnNpdHkgKENNVSlAZHJhZ29uZm9yY2U"
      },
      {
        "date": "2026-10-11",
        "name": "TQC S.A.",
        "country": "PE",
        "sectors": [
          "manufacturing"
        ],
        "url": "https://www.ransomware.live/id/VFFDIFMuQS5AZHJhZ29uZm9yY2U"
      },
      {
        "date": "2026-10-10",
        "name": "TEXMA International Co., Ltd",
        "country": "TW",
        "sectors": [
          "manufacturing"
        ],
        "url": "https://www.ransomware.live/id/VEVYTUEgSW50ZXJuYXRpb25hbCBDby4sIEx0ZEBkcmFnb25mb3JjZQ"
      },
      {
        "date": "2026-10-07",
        "name": "Petrosul Distribuidora, Transportadora e Comércio de Combustíveis Ltda.",
        "country": "BR",
        "sectors": [
          "energy"
        ],
        "url": "https://www.ransomware.live/id/UGV0cm9zdWwgRGlzdHJpYnVpZG9yYSwgVHJhbnNwb3J0YWRvcmEgZSBDb23DqXJjaW8gZGUgQ29tYnVzdMOtdmVpcyBMdGRhLkBkcmFnb25mb3JjZQ"
      },
      {
        "date": "2026-10-07",
        "name": "RÉSO",
        "country": "FR",
        "sectors": [
          "technology"
        ],
        "url": "https://www.ransomware.live/id/UsOJU09AZHJhZ29uZm9yY2U"
      },
      {
        "date": "2026-09-24",
        "name": "winfashion",
        "country": "??",
        "sectors": [
          "consumer"
        ],
        "url": "https://www.ransomware.live/id/d2luZmFzaGlvbkBkcmFnb25mb3JjZQ=="
      },
      {
        "date": "2026-09-24",
        "name": "Arizona Vascular Medical Equipment, Inc",
        "country": "US",
        "sectors": [
          "healthcare"
        ],
        "url": "https://www.ransomware.live/id/QXJpem9uYSBWYXNjdWxhciBNZWRpY2FsIEVxdWlwbWVudCwgSW5jQGRyYWdvbmZvcmNl"
      },
      {
        "date": "2026-09-24",
        "name": "BMGP Groupe",
        "country": "FR",
        "sectors": [
          "unknown"
        ],
        "url": "https://www.ransomware.live/id/Qk1HUCBHcm91cGVAZHJhZ29uZm9yY2U="
      }
    ]
  },
  "convergences": [
    {
      "name": "RUS Industrial, LLC",
      "flagged": "2026-08-08",
      "classes": [
        "leak",
        "notice"
      ],
      "curated": false,
      "hand_picked": false
    }
  ],
  "reports": [
    {
      "url": "https://reliaquest.com/blog/psts-industry-defense-gap-is-architectural-what-to-do-about-it/",
      "publisher": "ReliaQuest",
      "published": "2026-11-06",
      "title": "The PSTS Industry’s Defense Gap Is Architectural. Here’s What to Do About It.",
      "origin": "feed",
      "primary": false
    },
    {
      "url": "https://reliaquest.com/blog/threat-spotlight-ransomware-and-cyber-extortion-in-q3-2026/",
      "publisher": "ReliaQuest",
      "published": "2026-11-03",
      "title": "Ransomware and Cyber Extortion in Q3 2026",
      "origin": "feed",
      "primary": false
    },
    {
      "url": "https://flare.io/learn/resources/blog/the-com-ecosystem-actors-attribution",
      "publisher": "Flare",
      "published": "2026-10-20",
      "title": "Arachnophobia: How Fear, Branding, and Bad Attribution Distorted The Com",
      "origin": "feed",
      "primary": false
    },
    {
      "url": "https://asec.ahnlab.com/en/95949/",
      "publisher": "AhnLab ASEC",
      "published": "2026-10-11",
      "title": "September 2026 Threat Trend Report on Ransomware",
      "origin": "feed",
      "primary": false
    },
    {
      "url": "https://flare.io/learn/resources/blog/healthcare-ransomware-attack-surface",
      "publisher": "Flare",
      "published": "2026-10-08",
      "title": "Healthcare Is Cybercrime’s Highest-Value Target: Ransomware, Exposure, and the Expanding Attack Surface",
      "origin": "feed",
      "primary": false
    },
    {
      "url": "https://www.microsoft.com/en-us/security/blog/2026/09/24/beyond-ransomware-tracking-storm-2570-consistent-tradecraft-across-deployments/",
      "publisher": "Microsoft Threat Intelligence",
      "published": "2026-09-24",
      "title": "Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments",
      "origin": "feed",
      "primary": false
    }
  ],
  "techniques": [],
  "cves": [],
  "indicators": {
    "list": [],
    "withheld": 0
  },
  "rules": [],
  "coverage": {
    "techniques": 0,
    "defendable": 0,
    "covered": 0,
    "uncovered": []
  }
}