Sourced from leak-site trackers — reflects the group's claim of a victim, not a confirmed breach.
How evasion-resistant our detection coverage is against DragonForce's techniques — Summiting the Pyramid scores analytics (1 brittle – 5 robust); the actor inherits through its TTPs. This is a detection-engineering metric, not an attribution signal — see Attribution for confidence.
Tools observed in intrusions leading to DragonForce's ransomware, per the community Ransomware Tool Matrix — observed use, not exhaustive. Snapshot 2026-08-07.
+23 more relationships — see the relationships browser.
Leak-site postings via ransomware.live — claimed by the group, not confirmed breaches. Metadata only. MENA Ransomware Watch →
| Date | Victim | Country | Sector |
|---|---|---|---|
| 2026-08-24 | Wozair | UAE | Other |
| 2026-07-18 | NewNet | Saudi Arabia | Technology |
| 2026-07-16 | Sinai Grand Casino | Egypt | Hospitality |
| 2026-07-14 | Midal Cables | UAE | Manufacturing |
| 2026-07-13 | degeremcia.com | Türkiye | — |
| 2026-07-12 | Al - Saidi Factory | Saudi Arabia | Manufacturing |
| 2026-06-12 | Corniche Hotel Abu Dhabi | UAE | Hospitality |
| 2026-06-12 | The DRM | Bahrain | Professional Services |
| 2026-06-12 | Al Ishrak Contracting | UAE | Manufacturing |
| 2026-06-12 | Al Shafar GRC | UAE | Professional Services |
| 2026-06-11 | Cekok | Türkiye | Manufacturing |
| 2026-06-03 | SETS Solutions | Lebanon | Professional Services |
These entities are frequently mentioned together in source material; co-occurrence is not a verified relationship.