rift.cysentrix
← Back to actors

Threat actor

Dragonforce

18 observed events

AIDragonforce has been observed in three ransomware incidents, with reported activity targeting the education sector. The incidents involved countries India and Russia.

Activity type

Ransomware
18

Verification

Claim
18

Top sectors

Healthcare
3
Hospitality
3
Manufacturing
3
Business Services
1
Financial Services
1

Top countries

US
10
CN
1
GB
1
ID
1
SA
1

Observed events

Claim High Ransomware

EduSpa

AIDragonforce claims to have listed EduSpa, a hospitality-sector organization, on its extortion site per Ransomware.live. This is an unverified claim.

Actor Dragonforce 2 sources
Records Undisclosed
Claim High Ransomware

Primary Eye Care

AIDragonforce has listed Primary Eye Care, a healthcare organization, on its extortion site, claiming to possess stolen data. The claim is unverified.

Actor Dragonforce 2 sources
Records Undisclosed
Claim High Ransomware

One Community FCU

(UPD: Added additional internal documentation and longer-term customer data. Also included data showing low network security against breaches.) One Community FC...

Actor Dragonforce 1 source
Records Undisclosed
Claim High Ransomware

P. A. Inc. (Performance Alloys)

AIDragonforce claims to have listed P. A. Inc. (Performance Alloys), a manufacturing firm, on an extortion site per Ransomware.live. This is an unverified claim.

Actor Dragonforce 2 sources
Records Undisclosed
Claim High Ransomware

Mike Graham Heating And Air Conditioning

AIDragonforce has listed Mike Graham Heating And Air Conditioning on its extortion site, claiming to have data. This is an unverified claim.

Actor Dragonforce 2 sources
Records Undisclosed
Claim High Ransomware

Baicizhan

Baicizhan is a language learning platform specializing in English instruction. It offers a wide range of tools and resources designed to help users overcome the...

Actor Dragonforce 1 source
Records Undisclosed
Claim High Ransomware

TUI China

AIDragonforce claims to have listed TUI China, a hospitality sector organization, on an extortion-site listing. This is an unverified claim, as reported by Ransomware.live.

Actor Dragonforce 2 sources
Records Undisclosed
Claim High Ransomware

Lamont Pridmore

AIDragonforce claims to have listed Lamont Pridmore on its extortion site, per Ransomware.live. This is an unverified claim.

Actor Dragonforce 2 sources
Records Undisclosed
Claim High Ransomware

RUS Industrial

AITL;DR: Dragonforce claims to have listed manufacturing firm RUS Industrial on an extortion site. This is an unverified claim, with no confirmation of any breach.

Actor Dragonforce 2 sources
Records Undisclosed
Claim High Ransomware

www.mbmlawsc.com

AIDragonforce has listed www.mbmlawsc.com, a professional services firm, on its extortion site, per Ransomware.live. This is an unverified claim of data theft or compromise.

Actor Dragonforce 2 sources
Records Undisclosed
Claim High Ransomware

Katathani Phuket Beach Resort

AIThe Dragonforce ransomware group claims to have breached Katathani Phuket Beach Resort, according to a listing on Ransomware.live.

Actor Dragonforce 2 sources
Records Undisclosed
Claim High Ransomware

Syntron Bioresearch

AIDragonforce claims to have breached healthcare firm Syntron Bioresearch, listed on their extortion site.

Actor Dragonforce 2 sources
Records Undisclosed
Claim High Ransomware

Deluxe Medical Supply

AIDragonforce claims to have listed Deluxe Medical Supply, a healthcare organization, on its extortion site.

Actor Dragonforce 2 sources
Records Undisclosed
Claim High Ransomware

ID engineering

AIDragonforce claims to have listed ID Engineering, a manufacturing firm, on its extortion site; this claim is unverified.

Actor Dragonforce 2 sources
Records Undisclosed
Claim High Ransomware

Koshkaryan Law Group

AIPer Ransomware.live, Dragonforce claims to have listed business services firm Koshkaryan Law Group.

Actor Dragonforce 2 sources
Records Undisclosed
Claim High Ransomware

One Community FCU

AIDragonforce claims to have breached One Community FCU (financial services) per a Ransomware.live listing; unverified.

Actor Dragonforce 1 source
Records Undisclosed
Claim High Ransomware

NewNet

AIDragonforce claims to have breached telecommunication organization NewNet, per an unverified extortion-site listing.

Actor Dragonforce 2 sources
Records Undisclosed
Claim High Ransomware

Kee Wah Bakery

Kee Wah Bakery specializes in traditional and innovative baked goods, offering a wide range of products including mooncakes, festive treats, and gift items. The...

Actor Dragonforce 1 source
Records Undisclosed