DragonForce Ransomware Cartel: A Comedy of Cybercriminal Errors or the Ultimate Cyber Threat?
DragonForce ransomware has rebranded itself as a “ransomware cartel,” offering affiliates 80% of profits and customizable tools. Its partnership with Scattered Spider elevates the threat landscape, proving that when cybercriminals join forces, they don’t just “think outside the box,” they break into it and hold the box for ransom.

Hot Take:
Looks like DragonForce has pulled a “Fast & Furious” on us—evolving from a solo hacker group into a full-fledged ransomware cartel. With Scattered Spider in their corner, it’s less about digital pickpocketing and more about high-stakes cyber heists. Lock your digital doors, folks, because this duo is here to make cybersecurity professionals sweat more than a cat in a room full of rocking chairs!
Key Points:
- DragonForce has evolved from a ransomware group to a so-called “ransomware cartel,” increasing its global threat level.
- They exploit vulnerabilities in drivers to deactivate security measures, making their attacks harder to fend off.
- DragonForce’s partnership with Scattered Spider enhances their ability to execute high-profile ransomware attacks.
- Scattered Spider uses sophisticated social engineering tactics to gain access, such as MFA fatigue and SIM swapping.
- The duo’s cartel-style operation complicates defensive efforts for organizations globally.
Already a member? Log in here
