OTX Threat: DragonForce Ransomware Profile: From Affiliate Program to Cybercrime Cartel

DragonForce is a financially motivated ransomware operation that emerged in August 2023, initially using leaked LockBit 3.0 code and later transitioning to Conti v3-based variants. Operating as a Ransomware-as-a-Service model, they offer affiliates an 80% revenue share and comprehensive management tools. By March 2025, they evolved into a 'cartel' structure, providing white-label services. Their a CVEs: CVE-2021-44228, CVE-2023-46805, CVE-2024-21887, CVE-2024-21893, CVE-2024-21412 Sectors: Manuf