Skip to content

CyberSIXT Search

Threat actor · coverage timeline

DragonForce

15 articles from 8 outlets between 9 Sep 2025 and 22 Jun. First reported by SecurityWeek. The busiest day was Wed 17 Jun, with 2 articles.

Articles: 15; all time · from 8 outlets
Days with coverage: 11; across 287 days
Busiest day: 2; articles on Wed 17 Jun
Last 7 days: 0a day; vs 0 a day before
First report: 9 Sep 2025; SecurityWeek
CVEs named: 0; in these articles

Coverage over time

15 articles · 9 Sep 2025 – 22 Jun

9 Sep 2025First report9 Sep 2025 · SecurityWeek

Show as table

DragonForce: articles per day
Day (UTC)	Articles	Outlets
Tue 9 Sep 2025	1	SecurityWeek 1
Wed 8 Oct 2025	2	Security Affairs 1, DataBreaches 1
Thu 9 Oct 2025	1	GBHackers 1
Wed 5 Nov 2025	2	GBHackers 1, Darktrace 1
Fri 7 Nov 2025	1	SecurityOnline 1
Mon 10 Nov 2025	2	SecurityOnline 1, GBHackers 1
Mon 19 Jan	1	SecurityOnline 1
Tue 16 Jun	1	Infosecurity 1
Wed 17 Jun	2	SecurityWeek 1, Security Affairs 1
Thu 18 Jun	1	The Hacker News 1
Mon 22 Jun	1	SecurityOnline 1

Articles

15 articles

Mon 22 Jun1 article

04:40
Symantec spots DragonForce Backdoor.Turn using Teams TURN relaySecurityOnline

Thu 18 Jun1 article

14:01
DragonForce hides ransomware C2 via Microsoft Teams relaysThe Hacker News

Wed 17 Jun2 articles

16:49
DragonForce hides malware in Microsoft Teams via custom backdoorSecurity Affairs
10:46
DragonForce ransomware leverages Teams for new Backdoor.Turn C2SecurityWeek

Tue 16 Jun1 article

12:11
DragonForce Ransomware Exploited Microsoft Teams to Hide in Attack Against Major CompanyInfosecurity

Mon 19 Jan1 article

02:30
DragonForce: The Rise of a New “Ransomware Cartel” Built on LockBit and Conti DNASecurityOnline

Mon 10 Nov 2025 20252 articles

10:25
Ransomware Operators Exploit RMM Tools to Deploy Medusa and DragonForceGBHackers
01:30
MSP Nightmare: Medusa & DragonForce Exploit SimpleHelp RMM Flaws for SYSTEM AccessSecurityOnline

Fri 7 Nov 2025 20251 article

00:55
DragonForce Ransomware Strikes Manufacturing Sector with Brute-Force, Exfiltrating Data Over SSH to Russian HostSecurityOnline

Wed 5 Nov 2025 20252 articles

20:10
Tracking a Dragon: Investigating a DragonForce-affiliated ransomware attack with DarktraceDarktrace
05:41
DragonForce Cartel Surfaces from Leaked Conti v3 Ransomware Source CodeGBHackers

Thu 9 Oct 2025 20251 article

06:45
Data-Leak Sites Surge to Record Levels Amid Scattered Spider RaaS and LockBit 5.0 RiseGBHackers

Wed 8 Oct 2025 20252 articles

19:50
DragonForce, LockBit, and Qilin, a new triad aims to dominate the ransomware landscapeDataBreaches
19:20
DragonForce, LockBit, and Qilin, a new triad aims to dominate the ransomware landscapeSecurity Affairs

Tue 9 Sep 2025 20251 article

11:00
Threat Actor Connected to Play, RansomHub and DragonForce Ransomware OperationsSecurityWeek · first report