DragonForce, LockBit, and Qilin, a new triad aims to dominate the ransomware landscape

Ransomware groups DragonForce, LockBit, and Qilin have formed a strategic alliance to enhance their attack capabilities, with the aim of sharing tools and infrastructure to make attacks more effective, according to SecurityAffairs as reported by Pierluigi Paganini.

The coalition could restore LockBit’s reputation among affiliates following its takedown and may lead to more frequent ransomware attacks, including on critical infrastructure, echoing past collaborations such as the Maze-LockBit partnership that popularised double extortion tactics. This quarter, the newly returned LockBit formed a coalition with prominent RaaS groups DragonForce and Qilin, a partnership poised to drive more frequent and effective ransomware attacks, reads the ReliaQuest report.

The alliance is described as potentially triggering a surge in attacks on critical infrastructure and expanding the threat to sectors previously considered low risk. The article notes these developments as part of an evolving cyber threat landscape, with implications for defenders across multiple sectors.