Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

DragonForce, a ransomware-as-a-service group active since 2023, has rebranded as a cartel and formed alliances with groups like Scattered Spider, LAPSUS$, and ShinyHunters. The group uses Conti-derived code and employs BYOVD attacks to terminate processes. DragonForce has expanded its affiliate program, allowing partners to white-label payloads and create variants. The group has exposed over 200 victims on its leak site, targeting various sectors. DragonForce's partnership with Scattered Spider, known for sophisticated social engineering techniques, has led to high-profile breaches. The group's ransomware samples show significant overlap with Conti's leaked source files and use ChaCha20 encryption.

DragonForce is a ransomware-as-a-service cartel that emerged in 2023, evolving from a traditional ransomware group into a more complex organization by forming alliances with other cybercriminal groups like Scattered Spider, LAPSUS$, and ShinyHunters. This coalition enhances their capabilities, particularly in social engineering and initial access techniques. DragonForce ransomware is based on Conti's leaked source code, sharing significant code overlap and using ChaCha20 encryption to secure victim data, making decryption without keys extremely difficult. The group employs BYOVD attacks, which involve loading vulnerable drivers to disable or terminate security software processes, thereby evading detection and increasing the success rate of their ransomware deployment. Their affiliate program allows partners to white-label ransomware payloads and create customized variants, increasing the diversity and reach of attacks. DragonForce has publicly exposed over 200 victims on their leak site, targeting a broad range of sectors globally, indicating a widespread and persistent threat. The partnership with Scattered Spider, known for sophisticated social engineering and credential theft techniques, has led to high-profile breaches, demonstrating the cartel's ability to combine technical and human attack vectors effectively. Although there are no known exploits in the wild specifically tied to this ransomware, the group's tactics, techniques, and procedures (TTPs) align with advanced persistent threat behaviors, including credential dumping, lateral movement, and process termination to disable defenses. The threat is ongoing and dynamic, with continuous evolution in payload variants and attack methods.

Detailed information about The DragonForce Cartel: Scattered Spider at the gate. Get real-time updates, technical details, and mitigation strategies.

The DragonForce Cartel: Scattered Spider at the gate - Live Threat Intelligence - Threat Radar | OffSeq.com

The DragonForce Cartel: Scattered Spider at the gate

Threats Tagged 'global'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'global'

Lead Pen Test Professional