Ransomware Group intelligence
Dragonforce
ActiveTrack Dragonforce with 717 published victims and 4 known leak locations in a single intelligence view.
Overview
Dragonforce is tracked by Breach House as a ransomware group with 717 published victims.
United States is currently the most targeted country in this dataset.
4 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (4)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Up checked 29m ago | z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion |
| Leak location 2 | Onion service | Up checked 29m ago | 3pktcrcbmssvrnwe5skburdwe2h3v6ibdnn5kbjqihsg6eu6s6b7ryqd.onion |
| Leak location 4 | Onion service | Down checked 29m ago | dragongoztkdfmnd7jkchznd3fvkpdmeh4vhbt6p3usrlsoy5dw2bhyd.onion |
| Leak location 3 | Onion service | Down checked 29m ago | dragonforxxbp3awc7mzs5dkswrua3znqyx5roefmi4smjrsdi22xwqd.onion |
Top Activity Sectors (17)
- Communication / Marketing 130
- Manufacturing / Engineering 88
- Finance / Legal / Insurance 70
- Services 56
- IT 46
- Construction / Real Estate 45
- Healthcare / Pharma 34
- Hospitality / Food & Beverage / Tourism 25
- Not identified 24
- Energy 22
- Retail / E-commerce 21
- Transportation / Travel / Logistics 20
- Public Sector 20
- Education 14
- Agriculture / Food 13
- NGOs / Associations 12
- Telecommunications 10
Typical Attacks (10)
▼MITRE ATT&CK does not currently catalogue Dragonforce, so this is our assessment of the techniques it uses, drawn from public reporting. The techniques themselves, and every "what that means" definition below, come from MITRE ATT&CK v19.2. Confidence: medium. Treat it as orientation, not attribution.
-
T1059.001 PowerShell Execution
What they do: dragonforce executes malicious payloads via PowerShell scripts injected into legitimate processes for command execution.
What that means: Adversaries may abuse PowerShell commands and scripts for execution.
-
T1685 Disable or Modify Tools Defense Impairment
What they do: dragonforce disables antivirus tools by terminating security processes and modifying Windows Defender settings.
What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
-
T1027.002 Software Packing Stealth
What they do: dragonforce packs its malware binaries to evade static detection by security tools.
What that means: Adversaries may perform software packing or virtual machine software protection to conceal their code.
-
T1070.004 File Deletion Stealth
What they do: dragonforce deletes Volume Shadow Copies via vssadmin /delete shadows to prevent rollback recovery.
What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
-
T1110 Brute Force Credential Access
What they do: dragonforce brute-forces local accounts using Hydra to obtain credentials for initial access.
What that means: Adversaries may use brute force techniques to gain access to accounts when passwords are unknown or when password hashes are obtained.
-
T1018 Remote System Discovery Discovery
What they do: dragonforce discovers remote hosts via SMB enumeration to identify high-value targets across networks.
What that means: Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system.
-
T1135 Network Share Discovery Discovery
What they do: dragonforce scans network shares using net use commands to discover victim file structures for targeting.
What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
-
T1021.002 SMB/Windows Admin Shares Lateral Movement
What they do: dragonforce moves laterally through SMB shares using mapped drives to access additional systems.
What that means: Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).
-
T1486 Data Encrypted for Impact Impact
What they do: dragonforce encrypts victim files using a custom ransomware binary with AES-256 encryption keys.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1490 Inhibit System Recovery Impact
What they do: dragonforce runs system shutdown commands to prevent recovery attempts and maximize disruption.
What that means: Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.
Tools Observed (14)
▼Software Dragonforce has been seen using, grouped by what it is used for. Legitimate administration tools appear here because these actors routinely abuse them — presence in this list is not itself malicious.
Credential theft
Defense evasion
Discovery & enumeration
Exfiltration
LOLBAS (living-off-the-land binaries)
Offensive security tooling
Tool data from Ransomware Tool Matrix by BushidoUK, licensed CC BY 4.0. Grouped by purpose and matched to this group by Breach House.
Ransom Notes (2)
▼The note this group leaves on a compromised machine. Click a filename to read it.
readme.xt
Good afternoon, As you can see you have been attacked by a ransomware program! We The DragonForce Ransomware Cartel offer you to make a deal with us. We can make a deal with you, all you need to do is contact us by following the instructions below. We are in no way connected to politics, we always keep our word. You have a chance to decrypt your files and avoid being published on our blog! Use this opportunity and also don't waste your time. The approximate date of deletion of the decryptor program, as well as publication on our blog 26/04/2025 00:00 UTC. - # 1 Communication Process, In order to contact us you need to click on the special link below, which is listed in #2. After that the negotiation process begins, in which you have the opportunity to request several things from us, 1. make a test decrypt. 2. get a list of the files stolen from you. At the conclusion of our negotiations we agree on a price, we set the price ourselves based on your income/your insurance. We scrutinize your documents and are well aware of how much income your company has per year. - # 2 Access to the meeting room, To access us please download Tor Browser which is available here. (https://www.torproject.org/) Once you download the special anonymous browser you need to follow this link, http://3pktcrcbmssvrnwe5skburdwe2h3v6ibdnn5kbjqihsg6eu6s6b7ryqd.onion Your unique ID: [snap] - use it to enter our meeting room. - # 3 Additional Support Contacts, Tox: 1C054B722BCBF41A918EF3C485712742088F5C3E81B2FDD91ADEA6BA55F4A856D90A65E99D20 - # 4 Recommendations, Do not try to recover your files with third-party programs, you will only do harm. Do not turn off / reboot your computer. Be courteous in our meeting room. Do not procrastinate. - # 5 Blog and News, Blog: http://z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion DragonNews: http://z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion/news
[rand].README.txt
Hello! Your files (orcl, IADeAPP, [snip] dbs) have been stolen from your network and encrypted with a strong algorithm. We work for money and are not associated with politics. All you need to do is contact us and pay. --- Our communication process: 1. You contact us. 2. We send you a list of files that were stolen. 3. We decrypt 1 file to confirm that our decryptor works. 4. We agree on the amount, which must be paid using BTC. 5. We delete your files, we give you a decryptor. 6. We give you a detailed report on how we compromised your company, and recommendations on how to avoid such situations in the future. --- Client area (use this site to contact us): Link for Tor Browser: http://3pktcrcbmssvrnwe5skburdwe2h3v6ibdnn5kbjqihsg6eu6s6b7ryqd.onion >>> Use this ID: [snip] to begin the recovery process. * In order to access the site, you will need Tor Browser, you can download it from this link: https://www.torproject.org/ --- Additional contacts: Support Tox: 1C054B722BCBF41A918EF3C485712742088F5C3E81B2FDD91ADEA6BA55F4A856D90A65E99D20 --- Recommendations: DO NOT RESET OR SHUTDOWN - files may be damaged. DO NOT RENAME OR MOVE the encrypted and readme files. DO NOT DELETE readme files. --- Important: If you refuse to pay or do not get in touch with us, we start publishing your files. 21/01/2024 00:00 UTC the decryptor will be destroyed and the files will be published on our blog. Blog: http://z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion Sincerely, 01000100 01110010 01100001 01100111 01101111 01101110 01000110 01101111 01110010 01100011 01100101
Ransom-note text from RansomLook, licensed CC BY 4.0.
Victims (717)
Search, filter and paginate the victim timeline for Dragonforce. Showing 101–200 of 717.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | www.twtci.com Trans World Trading id30513 View details | IT | |||
|
Trans World Trading Company, Inc. is a leading business conglomerate in the Philippines, recognized for its trust and reliability since 1946. The company specializes in providing sustainable material solutions through its divisions in plastics, chemicals, industrial products, and agrochemicals. With a strong commitment to integrating global innovations with local expertise, it serves various industries across the nation. Trans World continues to expand its operations and influence, shaping the future of the Philippine industry |
|||||
| Ransomware | www.twtci.com Trans World Trading id30513 View details | Philippines | IT | ||
|
Trans World Trading Company, Inc. is a leading business conglomerate in the Philippines, recognized for its trust and reliability since 1946. The company specializes in providing sustainable material solutions through its divisions in plastics, chemicals, industrial products, and agrochemicals. With a strong commitment to integrating global innovations with local expertise, it serves various industries across the nation. Trans World continues to expand its operations and influence, shaping the future of the Philippine industry |
|||||
| Ransomware | Al - Saidi Factory id30505 View details | Saudi Arabia | Other | ||
|
Alsaidi.com is a Saudi Arabian entity operating in the other sector, providing various offerings to its customers. The company is based in Saudi Arabia and serves its clients within the country. Alsaidi.com was listed as a ransomware victim associated with dragonforce. |
|||||
| Ransomware | Al - Saidi Factory id30505 View details | Saudi Arabia | Other | ||
|
Al Saidi Al Saidi Trading and Industry is a prominent group of companies providing tailored chemical and logistics solutions primarily for clients in the Middle East. They offer a comprehensive range of global logistics services, including supply chain management and freight forwarding, designed to enhance business efficiency. Additionally, the company specializes in manufacturing chemicals for the Oil & Gas and petrochemical industries, focusing on reliability and sustainability. With a commitment to high-quality, environmentally friendly products, Al Saidi aims to support clients in maximizing their operational effectiveness. |
|||||
| Ransomware | STEP Oiltools id30506 View details | Romania | Energy | ||
|
Stepoiltools.com is a company operating in the energy sector, based in Romania. The company likely provides tools and services related to oil and energy production. Stepoiltools.com was listed as a ransomware victim associated with dragonforce |
|||||
| Ransomware | STEP Oiltools id30506 View details | Romania | Energy | ||
|
STEP Oiltools is a leading global provider of solids control and drilling waste management services, primarily serving the oil and gas and civil engineering industries. The company offers a range of products including mini separation systems, modular recyclers, and dewatering systems, aimed at enhancing efficiency and sustainability in drilling operations. With a commitment to health and safety, STEP Oiltools has received recognition for its high standards in workplace safety. Their clientele includes major players in the energy sector, civil construction, and water treatment markets. |
|||||
| Ransomware | Access Equipment Hire id30499 View details | Australia | IT | ||
|
Access Group is an Australian IT company providing various services. The company operates in the IT sector, offering solutions to its clients. Access Group was listed as a ransomware victim associated with dragonforce. |
|||||
| Ransomware | Access Equipment Hire id30499 View details | Australia | IT | ||
|
Access Group International is a leading privately owned provider of access, material handling, power generation, and construction equipment. The company is dedicated to safety, performance, and reliability, serving Australia's demanding industries with dependable equipment and expertise. Their integrated services include maintenance, OEM manufacturing, transport, logistics, and workforce solutions, allowing for seamless project support. With a focus on adaptability and tailored solutions, Access Group International is a trusted partner for projects of all sizes. |
|||||
| Ransomware | The Schuett Companies id30465 View details | United States | Healthcare / Pharma | ||
|
Schuett Cares is a healthcare services provider based in the United States, offering medical care and related services to patients. As a healthcare provider, Schuett Cares operates in the medicine sector, serving the US market. Schuett Cares was listed as a ransomware victim associated with dragonforce |
|||||
| Ransomware | The Schuett Companies id30465 View details | United States | Healthcare / Pharma | ||
|
The Schuett Companies, Inc. is a family-owned business with over 50 years of experience specializing in affordable housing for seniors, individuals with disabilities, and families. They manage approximately 1,600 housing units across Minnesota, North Dakota, and South Dakota. Since 1968, they have also offered Home Health Care services through their CompassionCare program, ensuring residents can age in place comfortably. The company's commitment to providing a supportive community emphasizes the importance of a stable home for a healthy life. |
|||||
| Ransomware | hive360.com id30309 View details | United States | IT | ||
|
Hive360.com is an IT company based in the United States, offering various services within the information technology sector. As a US-based entity, hive360.com operates in a competitive market, providing solutions to its clients. Hive360.com was listed as a ransomware victim associated with dragonforce. |
|||||
| Ransomware | hive360.com id30309 View details | United States | IT | ||
|
HIVE360 is a UK-based employment administration and employee benefits specialist. They help businesses streamline their payroll and HR operations while improving employee engagement |
|||||
| Ransomware | amplesurveyor.com id30310 View details | United States | IT | ||
|
Amplesurveyor.com is an IT company based in the United States, offering various services within the IT sector. The company operates in the US, providing solutions to its clients. Amplesurveyor.com was listed as a ransomware victim associated with dragonforce |
|||||
| Ransomware | amplesurveyor.com id30310 View details | United States | IT | ||
|
Ample Surveyor Services Limited is a professional property and construction consultancy firm based in Hong Kong. |
|||||
| Ransomware | hwaseng id30085 View details | Taiwan, Province of China | Manufacturing / Engineering | ||
|
Hwaseng.com.tw is a company based in Taiwan, operating in the manufacturing and engineering sector. The company likely provides various products and services related to its sector. Hwaseng.com.tw was listed as a ransomware victim associated with dragonforce |
|||||
| Ransomware | hwaseng id30085 View details | Taiwan, Province of China | Manufacturing / Engineering | ||
|
A Taiwanese manufacturer with forty years of experience, specializing in the high-precision production of metal fasteners, precision-machined parts, and components for the electronics and automotive industries. |
|||||
| Ransomware | agroprime id30086 View details | Brazil | Agriculture / Food | ||
|
Agroprime.com operates in the agriculture and food sector in Brazil, providing various offerings to its customers. As a company in this sector, it plays a role in the country's food supply chain. Agroprime.com was listed as a ransomware victim associated with dragonforce. |
|||||
| Ransomware | agroprime id30086 View details | Brazil | Agriculture / Food | ||
|
development of specialized software (SaaS) for automating agribusiness management and monitoring field personnel |
|||||
| Ransomware | stni.co.kr id30087 View details | Korea, Republic of | Manufacturing / Engineering | ||
|
STNI, based in South Korea, operates in the manufacturing and engineering sector, providing various products and services. As a key player in its industry, the company's operations and offerings are likely focused on meeting the needs of its clients in Korea and potentially beyond. STNI was listed as a ransomware victim associated with dragonforce. |
|||||
| Ransomware | stni.co.kr id30087 View details | Korea, Republic of | Manufacturing / Engineering | ||
|
Creating accurate virtual replicas involves production facilities, workshops, and equipment for modeling, testing, and optimizing technological processes. |
|||||
| Ransomware | vipimaging id30088 View details | United States | Healthcare / Pharma | ||
|
Vipimaging.com is a healthcare and medical services provider based in the United States, offering various medical imaging services. The company operates within the healthcare sector, providing essential services to patients and medical professionals. Vipimaging.com was listed as a ransomware victim associated with dragonforce |
|||||
| Ransomware | vipimaging id30088 View details | United States | Healthcare / Pharma | ||
|
VIP Imaging is the largest mobile nuclear imaging company in Southern California, specializing in cardiac PET/CT and SPECT studies for cardiologists. The company is employee-owned and prides itself on having the best technicians and technology in the industry, ensuring high-quality patient care and support for proper billing. |
|||||
| Ransomware | medipakpharma.com id30090 View details | Pakistan | Healthcare / Pharma | ||
|
Medipakpharma.com operates in the healthcare and pharmaceutical sector in Pakistan, offering various products and services. As a key player in the country's healthcare industry, the company's primary focus is on providing quality pharmaceutical products. Medipakpharma.com was listed as a ransomware victim associated with dragonforce. |
|||||
| Ransomware | medipakpharma.com id30090 View details | Pakistan | Healthcare / Pharma | ||
|
The Pakistani pharmaceutical company Medipak Limited (***.com) specializes in the manufacture of infusion solutions, medical devices, and pharmaceutical products. |
|||||
| Ransomware | Aptora id30047 View details | United States | IT | ||
|
Aptora.com is an IT company based in the United States, offering various services to its clients. The company operates within the IT sector, providing solutions to businesses. Aptora.com was listed as a ransomware victim associated with dragonforce. |
|||||
| Ransomware | Aptora id30047 View details | United States | IT | ||
|
Aptora is an aggressively growing software company in Lenexa, KS. The company offers award-winning software and consulting services to the service and contracting industries. In 2006, the company were voted one of the top twenty-five companies in the Kansas City area by the Business Journal. Aptora also provides data hosting and processing services for its clients on its own infrastructure. During our visit, we took not only the company’s own data but also the databases of its clients. Unfortunately, the company showed no interest in preserving its clients’ data. When we contacted them, they told us the company had assured them there was no leak. That’s not true. For the release, we have prepared not only Aptora data but also archives containing the databases of more than 100 of its clients. This could affect Aptora leadership, and they may decide to prevent publication. |
|||||
| Ransomware | bits-pilani.ac.in id30081 View details | India | Education | ||
|
BITS Pilani is a premier Indian private research university and "Institution of Eminence" known for elite engineering and science programs across five campuses. Founded in 1964, it is highly selective with a 1.47% acceptance rate and offers a 0% attendance policy with mandatory industry immersion. |
|||||
| Ransomware | mihana-v.com id30082 View details | Russian Federation | IT | ||
|
Here is the comprehensive corporate overview of MIHANA Seisakusho Co., Ltd. based on their official company profiles, technical catalogs, and industrial registries |
|||||
| Ransomware | Tecfi SpA id29941 View details | Italy | IT | ||
|
Tecfi is a company specialising in the design, production and sale of fastening systems. Going into more detail, three production lines can be highlighted. ▪ Plastic and rubber moulding ▪ Sheet metal moulding with blanking ▪ Cold stamping and flatbed rolling machines |
|||||
| Ransomware | Ink id29861 View details | United Kingdom | Communication / Marketing | ||
|
(including internal documentation, counterparties, contractors, software, correspondence, and the like) INK is an award-winning production studio based in London specialising in CGI, Animation and Retouching. We combine the technical and the beautiful to bring ideas to life across film, print and interactive platforms. |
|||||
| Ransomware | Cheoy Lee Shipyards id29822 View details | Hong Kong | Other | ||
|
Cheoy Lee Shipyards Ltd. specializes in the design and manufacturing of a diverse range of vessels, including tugs, ferries, crew boats, pilot boats, and luxury yachts. Their state-of-the-art facility in Zhuhai, China, is equipped with advanced machinery, enabling the production of high-quality vessels up to 70 meters in length. The company serves a global clientele, focusing on maritime industries that require innovative and efficient solutions for various operational needs. Cheoy Lee is committed to excellence, sustainability, and employee welfare, fostering a strong community within their workforce. |
|||||
| Ransomware | Al Ishrak Contracting id29823 View details | United Arab Emirates | Other | ||
|
Al Ishrak Contracting Company, established in 1975 in Dubai, specializes in construction works including industrial warehouses, residential and commercial buildings, and civil engineering projects on a turnkey basis. The company boasts a skilled workforce of over 250 personnel, including engineers and project managers, dedicated to delivering quality and timely services. Their commitment to client satisfaction is reflected in their values of quality, integrity, teamwork, and technical excellence. Al Ishrak's diverse portfolio includes various projects such as commercial buildings, industrial sheds, and labor accommodations. |
|||||
| Ransomware | Corniche Hotel Abu Dhabi id29827 View details | United Arab Emirates | Hospitality / Food & Beverage / Tourism | ||
|
At the heart of the Central Business District. Situated along the stunning Corniche stretch, our hotel’s 305 luxurious guest rooms offer breathtaking views of the Capital Garden and sparkling turquoise waters of the Arabian Gulf. There’s something here for everyone. Busy executives will appreciate our first-class business centre and car rental services, and families will love our childcare and babysitting services. Our health and fitness center, with sauna and steam room, will delight any globetrotter recovering from jet lag. And our wheelchair accessible rooms and public areas are a comfort for the physically impaired. Sightseeing couldn’t be simpler. Our hotel offers free scheduled pick up and drop off to the city’s main attractions: Yas Waterworld, Ferrari World, Corniche Public Beach, and World Trade Centre Mall. Book here for our Best Price Guarantee promise. Earn and spend loyalty points on all qualifying stays. The level of points, benefits and privileges are subject to availability and may vary at certain participating hotels. |
|||||
| Ransomware | A. Liberty Engineering Co. Ltd id29829 View details | Hong Kong | Manufacturing / Engineering | ||
|
Founded in 1973 as Liberty Electrical Engineering Company Limited, A. Liberty Engineering Co Ltd has continually evolved to meet the dynamic needs of the electrical services sector. With a rich history in design and contracting, the company has expanded its offerings to include cutting-edge solutions in the realm of sustainable energy. In response to the burgeoning demand for electric vehicle infrastructure, A. Liberty Engineering proudly introduces its self-branded EV chargers, designed for both AC and DC supercharging. These state-of-the-art systems enhance the efficiency of electric vehicle charging while seamlessly integrating with existing Intelligent EV Charging and IoT LV Switchboard Monitoring systems. |
|||||
| Ransomware | Al Shafar GRC id29830 View details | United Arab Emirates | Services | ||
|
ASGRC is a leading provider of Glass Fiber Reinforced Concrete (GRC) solutions, specializing in the design, manufacturing, and installation of high-quality products for both residential and industrial projects. Established in 2003, the company has grown to become the largest GRC facility in the UAE, known for its innovative and aesthetically pleasing cladding systems, decorative screens, domes, furniture, and precast units. ASGRC has contributed to iconic architectural landmarks in the UAE, combining craftsmanship with sustainability. The company also offers expert construction consulting services to ensure that client visions are realized effectively. |
|||||
| Ransomware | The DRM id29831 View details | Bahrain | Retail / E-commerce | ||
|
Durrat Resort Management specializes in providing high-quality resort management services. Their offerings include operational management, marketing strategies, and guest services tailored to enhance the overall experience of resort guests. The company primarily targets luxury resort owners and investors looking to optimize their properties' performance. With a focus on excellence and customer satisfaction, Durrat aims to elevate the standards of resort management in the industry. |
|||||
| Ransomware | Areco id29794 View details | Sweden | IT | ||
|
Areco Steel is the parent company of the privately-owned Areco Group, which includes five divisions: Areco Metals, Areco Profiles, Areco Direct, and Areco Properties. The company's business idea is to develop, manufacture, and globally market products and services tailored to the needs of industries. Their product offerings include various types of metals, profiles, and construction materials. Areco Steel aims to serve a diverse range of industrial clients with innovative solutions. |
|||||
| Ransomware | Hong Kong Parkview id29802 View details | Hong Kong | Construction / Real Estate | ||
|
Hong Kong Parkview offers over 200 luxury serviced apartments and a private clubhouse featuring recreational and dining facilities. Located within Tai Tam Country Park, it provides a tranquil living experience just minutes from the city center. The complex includes amenities such as a fitness center, swimming pools, themed playrooms, and various dining options. Targeting both long-term residents and short-term guests, it serves as an ideal home away from home. |
|||||
| Ransomware | Astec Valves & Fittings Pvt id29803 View details | India | Manufacturing / Engineering | ||
|
Astec Valves & Fittings Private Limited specializes in providing high-quality instrumentation and piping solutions for various industries, including Oil & Gas, Refining, Petrochemical, and Nuclear Power. Established in 1965, the company offers a range of products such as instrument tube fittings, valves, and integrated assemblies, with a focus on innovative technologies that enhance process measurement and reduce maintenance downtime. With a presence in 40 countries and over a million installations, Astec is recognized for its eco-friendly product technologies and has received multiple awards for technical innovation. Their clients include sectors like shipbuilding, water treatment, and pharmaceuticals, making them a trusted partner for instrumentation and piping engineers worldwide. |
|||||
| Ransomware | Cekok id29804 View details | Türkiye | Manufacturing / Engineering | ||
|
Çekok Gıda is a leading fruit and vegetable producer in Turkey and Europe, known for its commitment to sustainable agriculture and high-quality products. The company cultivates 35 types of fruits and vegetables across 13,500 decares of farmland, utilizing advanced technology and adhering to strict environmental and safety |
|||||
| Ransomware | Brian Cox id29805 View details | United Kingdom | Other | ||
|
Established in 1984, Brian Cox & Company is a leading estate agent in Middlesex, specializing in residential lettings and property management. With six local offices, they provide maximum exposure for homeowners seeking buyers or tenants. Their services include property valuation and a wide range of property types for rent and sale. The company caters to clients in Harrow, Sudbury, Greenford, and Northolt. |
|||||
| Ransomware | Sayre Associates id29726 View details | United States | Finance / Legal / Insurance | ||
|
(Including clients, projects, emails and financial documents) Sayre Associates, Inc. is a civil engineering and land surveying firm based in Sioux Falls, South Dakota, established in 1969. The company offers a range of services including land development planning, parks and recreation facilities design, drainage and erosion control, and construction administration. They focus on delivering high-quality solutions through collaboration and innovation, serving clients in South Dakota, Iowa, and Minnesota. Their talented team of engineers and surveyors is dedicated to improving community efficiency and quality of life. |
|||||
| Ransomware | REHA-ACTIV id29647 View details | Germany | Healthcare / Pharma | ||
|
REHA-ACTIV is a medical supply company that has been supporting individuals with health limitations for over 30 years. |
|||||
| Ransomware | Copamex id29590 View details | Mexico | Manufacturing / Engineering | ||
|
Copamex, headquartered in Monterrey, Mexico, and established in 1928, is a paper manufacturing company offering writing and printing, special, corrugated, and kraft paper solutions. |
|||||
| Ransomware | SETS Solutions id29591 View details | Lebanon | IT | ||
|
SETS Solutions is a prominent information technology company based in Lebanon, serving the Middle East since 1990. The company specializes in a diverse range of technology solutions, including its flagship Human Resources Management System, People365, which encompasses Time Attendance, Payroll, and HR modules. Additionally, SETS offers services in data center solutions, security, cloud computing, and end-user computing, catering to various industries. With over 25 years of experience, SETS aims to enhance organizational efficiency and productivity through innovative technology solutions. |
|||||
| Ransomware | Synex International Pvt Ltd id29544 View details | Sri Lanka | Energy | ||
|
Mechanical, Electrical, and Plumbing (MEP) systems, Extra Low Voltage (ELV) solutions, and Solar energy. |
|||||
| Ransomware | Taos Mountain Casino id29546 View details | United States | Hospitality / Food & Beverage / Tourism | ||
|
Taos Mountain Casino is a Native American gaming casino located in Taos, New Mexico. It is owned and operated by the Taos Pueblo, a federally recognized tribe known for its ancient, historic adobe pueblo. |
|||||
| Ransomware | Panorama BPO id29547 View details | Philippines | Finance / Legal / Insurance | ||
|
Panorama BPO is a large international company specializing in business process outsourcing (BPO) and providing comprehensive operational services for businesses. |
|||||
| Ransomware | Shoreline Sightseeing id29391 View details | United States | Construction / Real Estate | ||
|
Shoreline Sightseeing offers guided boat tours and water taxi services in Chicago, focusing on architecture and skyline views. Their popular tours include the Architecture River Tour, Skyline Lake Cruise, and Fireworks Tour, showcasing over 40 landmarks. The company caters to tourists looking for unique perspectives of the city and offers packages like the Chicago CityPASS for additional savings on attractions. Established in 1939, Shoreline operates the largest and most diverse fleet of cruise boats in Chicago |
|||||
| Ransomware | Henry Molded Products Likely to Engage tag. id29392 View details | United States | Public Sector | ||
|
Henry Molded Products specializes in the manufacturing of custom molded pulp fiber products and packaging solutions. The company is recognized for its eco-friendly offerings, which are biodegradable, compostable, and recyclable, catering to a growing demand for sustainable packaging. Their products are designed for various clients, including government, industry, and environmentally conscious consumers. Henry Molded Products is committed to providing cost-effective solutions while leading in technology, design, and engineering in the molded fiber sector. |
|||||
| Ransomware | President Container Group id29461 View details | United States | Manufacturing / Engineering | ||
|
President Container Inc., founded in 1947 by Marvin and George Grossbard, not only grew into one of the largest independent manufacturers of corrugated products in the country, but was also the seed of what has become todays President Container Group. From the beginning, President Containers philosophy was simple: Always ensure complete customer satisfaction by providing exceptional service and quality products. At President Container we realized that to ensure satisfaction we must continue to expand our products and services to meet the demands of the marketplace as our customers continue to evolve. |
|||||
| Ransomware | ksmart.ca id29466 View details | Canada | Construction / Real Estate | ||
|
K. Smart Associates Limited is a consulting engineering and planning company established in 1975, specialising in civil engineering and land use planning. |
|||||
| Ransomware | practicus.co.uk id29467 View details | United Kingdom | Services | ||
|
Practicus specializes in interim management, executive search, and project management services. |
|||||
| Ransomware | refreshmentsystems.co.uk id29468 View details | United Kingdom | Other | ||
|
Refreshment Systems is a UK-based vending machine company. |
|||||
| Ransomware | dunasgroen.nl id29469 View details | Netherlands | Services | ||
|
Landscape design supplies store.The company operates very economically and claims to be located on Dunas Groen. You can contact us only through the contact form or by phone: 06-52452889. |
|||||
| Ransomware | northbridge.com id29470 View details | Canada | Finance / Legal / Insurance | ||
|
North Bridge Venture Partners invests in outstanding individuals whose innovative ideas have the potential to transform entire industries. The firm provides funding from seed to growth stages, helping these ideas grow into successful companies. Their goal is to transform startups into market leaders. They work with clients seeking investment and support for their entrepreneurial projects. |
|||||
| Ransomware | wsm.co.uk id29471 View details | United Kingdom | Finance / Legal / Insurance | ||
|
The firm's core business is focused on UK tax services, which are provided to clients seeking an advisor with not only in-depth knowledge to navigate the country's complex tax system, but also impeccable integrity to ensure optimal tax results. At the core of the company is an experienced team of professionals providing expert knowledge and advice on UK tax matters to private and corporate clients – both local, national, and international. In the current climate of tightening anti-tax evasion measures, WSM specialists firmly believe in the ethical right of taxpayers to manage their financial affairs – strictly within the law – in a way that minimizes their tax liabilities. In addition to tax services, the firm offers accounting, auditing, insolvency (bankruptcy) support, due diligence, and consulting. Additionally, through its European partner network, Europe Fides, the company assists clients seeking complex, often multi-jurisdictional, advice in developing their overall strategic plans. |
|||||
| Ransomware | jcripberger.com id29473 View details | Germany | Construction / Real Estate | ||
|
J.C. Ripberger Construction Corporation is a full-service General Contractor, which self-performs Buildings/Structural Concrete, Carpentry, and Selective/Mass Demolition. Founded over 68 years ago in Zionsville, Indiana, our strategic focus has and continues to be new construction and renovations within the commercial, educational, health care and industrial sectors. |
|||||
| Ransomware | pieralisi.com id29474 View details | Italy | Other | ||
|
Pieralisi is a leading company specializing in the production of equipment for the extraction and separation of liquids using centrifugal force, including decanter centrifuges, separators and olive oil extractors. |
|||||
| Ransomware | nemd.com id29475 View details | Niger | Construction / Real Estate | ||
|
NEMD Architects, Inc. specializes in innovative, functional, and sustainable architectural solutions that address the unique challenges of each project. |
|||||
| Ransomware | fabbricausa.com id29476 View details | United States | Manufacturing / Engineering | ||
|
Fabbrica LLC specializes in design, development, and manufacturing, focusing on high quality standards and a creative approach. It serves clients seeking innovative solutions across various industries, emphasizing a human-centered, less corporate approach. Headquartered in the United States and with offices in Canada and Italy, Fabbrica strives to provide timely and relevant services. The company is currently seeking experienced professionals to join its team. |
|||||
| Ransomware | erh.co.uk id29477 View details | United Kingdom | Services | ||
|
ERH is a leading provider of traffic management solutions, offering installation, maintenance and commissioning services throughout the UK. |
|||||
| Ransomware | waypointsolutions.com id29478 View details | United States | Services | ||
|
Waypoint Business Solutions partners with Dell Technologies to provide comprehensive IT solutions, including hardware, software, and professional services. |
|||||
| Ransomware | profundo.nl id29479 View details | Netherlands | Other | ||
|
Profundo is an independent research organization dedicated to advancing sustainable development and social justice through insightful, evidence-based research and advice. |
|||||
| Ransomware | FWMK Law Offices id29480 View details | Israel | Finance / Legal / Insurance | ||
|
FWMK Law Offices is a full-service law firm known for its deep expertise in various legal areas, including high tech, mergers and acquisitions, and real estate. The firm provides top-quality legal advice and representation to a diverse clientele, including international clients, private investors, and public companies. With a team of highly skilled and responsive attorneys, FWMK emphasizes a professional yet friendly approach to client relations. Their commitment to excellence and understanding of business needs positions them as a trusted partner for organizations navigating the complexities of the legal landscape. |
|||||
| Ransomware | Ramos Rheumatology id29481 View details | United States | Services | ||
|
Ramos Rheumatology is a leading care center in Avoca, PA, specializing in the diagnosis and treatment of autoimmune diseases such as lupus, rheumatoid arthritis, and fibromyalgia. The practice emphasizes personalized care, ensuring that each patient receives tailored treatment plans in a compassionate environment. Their team, including local specialists, collaborates closely with primary care providers to deliver comprehensive rheumatology services. With a commitment to patient autonomy and immediate appointment availability for emergencies, Ramos Rheumatology prioritizes the well-being of its clients |
|||||
| Ransomware | hbroch.com id29485 View details | Germany | Manufacturing / Engineering | ||
|
Founded in 1941, Henry Broch Foods is an American international food ingredient manufacturer, processor, and packaging company, sourcing high-quality natural ingredients from producers worldwide. Our suppliers produce vegetables, fruits, herbs, spices, and natural colors, which are then concentrated, dehydrated, frozen, extracted, or pasteurized. The company's products are used in a wide range of applications, including: spice and seasoning blends, batters and coatings, bakery mixes, sauces, soups, salad dressings, flavorings, extracts and colors, fruit juices, flavored beverages, jams and jellies, ready-to-eat meats, entrees, ethnic dishes, pasta, rice and grains, pizza, and snack foods. |
|||||
| Ransomware | duboisag.com id29487 View details | Switzerland | Agriculture / Food | ||
|
To find a solution tailored to your situation, the company prioritizes your needs. The company's team's consulting, expertise, and high-quality service enhance the value of its products. The company is constantly evolving and seeking new technologies to improve the quality of your work and your profitability. Dubois Agrinovation was founded to usher in a new era in agriculture. |
|||||
| Ransomware | qlslogistics.com.au id29488 View details | Australia | Finance / Legal / Insurance | ||
|
QLS Group is Australia's leading supplier of large domestic appliances, serving the retail and consumer markets. Last year, the company shipped over 4 million appliances, including 1.4 million televisions, accounting for 65% of the Australian TV market. The company also operates Ecycle Solutions Pty Ltd, which provides recycling services for discarded televisions, computers, and polystyrene, demonstrating a strong commitment to sustainability. With a nationwide network and a focus on logistics, warehousing, and distribution, QLS Group offers reliable and comprehensive solutions throughout Australia. |
|||||
| Ransomware | dentonfirm.com id29489 View details | United States | Finance / Legal / Insurance | ||
|
Denton Law Firm is committed to rapid response and providing real solutions. |
|||||
| Ransomware | Greenway Technologies id29490 View details | Germany | Construction / Real Estate | ||
|
Greenway Technologies is a leading fire protection company based in Phoenix, AZ, specializing in a comprehensive range of services including fire suppression systems, alarms, sprinklers, and smoke control. Established in 2010, the company provides tailored fire protection design, installation, maintenance, and inspection services aimed at ensuring the safety of properties across the federal and commercial sectors. With a strong commitment to innovative, code-compliant solutions, Greenway Technologies aims to protect lives and property through their top-tier services. Their expert team is dedicated to delivering reliable, high-quality fire protection systems that meet the unique needs of their clients |
|||||
| Ransomware | Delbrook Capital Advisors id29491 View details | United States | Finance / Legal / Insurance | ||
|
Delbrook Capital Advisors is an alternative investment manager that specializes in the global materials sector. The company focuses on providing investment solutions tailored to the unique needs of clients interested in this industry. With a commitment to delivering value, Delbrook Capital Advisors aims to navigate the complexities of the materials market. Their expertise positions them as a key player for investors seeking opportunities in this sector. |
|||||
| Ransomware | WG Neukölln id29492 View details | Germany | Services | ||
|
WG Neukölln eG is a cooperative based in Berlin that offers various housing options and services, including apartments and residential projects. The organization is committed to social engagement and provides a venue for events, as well as support for its members through social management. They focus on sustainable energy projects and aim to enhance the living experience for their tenants. Their intended clients include individuals and families seeking affordable housing solutions in the Neukölln area. |
|||||
| Ransomware | rolser.com id29520 View details | Spain | Services | ||
|
Rolser specializes in producing a variety of eco-friendly and practical products, including folding and non-folding shopping carts, eco-friendly ironing boards, stylish shopping bags, and versatile aluminum ladders. The product range meets a variety of customer needs, including families with children, eco-conscious consumers, and those seeking convenient home solutions. Rolser emphasizes innovation and quality, offering special edition series and accessories to enhance the user experience. |
|||||
| Ransomware | epbinsurance.com id29521 View details | United States | Finance / Legal / Insurance | ||
|
Ekblad, Pardee & Bewell, Inc. is an independent insurance agency licensed in Minnesota, Wisconsin, South Dakota, and Arizona, offering a wide range of insurance products including auto, home, life, health, and business insurance. |
|||||
| Ransomware | jakn.com id29522 View details | IT | |||
|
JAKN Network Support & Services LLC operates in the custom software development and IT services industry. It employs 10 to 19 people and generates revenues of $5 million to $10 million. |
|||||
| Ransomware | allianceadjustment.com id29523 View details | United States | Finance / Legal / Insurance | ||
|
Alliance Adjustment Group is a leading independent insurance claims adjuster serving Pennsylvania and New Jersey, specializing in handling a variety of insurance claims, including water damage, fire, storm damage, theft, and vandalism. |
|||||
| Ransomware | xtr-global.de id29524 View details | Germany | Services | ||
|
Xchange Technology Rentals is a leading provider of IT and audiovisual equipment rental services for businesses, offering a wide range of devices with professional support and a focus on sustainability. |
|||||
| Ransomware | saver.nl id29525 View details | Netherlands | Services | ||
|
Saver NV operates in waste management, environmental services, and recycling. It employs 20 to 49 people and generates revenues of $5 to $10 million. The company is headquartered in Roosendaal, Noord-Brabant, the Netherlands. |
|||||
| Ransomware | vegfresh.com id29526 View details | United States | Agriculture / Food | ||
|
Veg-Fresh Farms is a family-owned business committed to providing its customers with the freshest and healthiest produce. The company offers a wide range of products, including organic potatoes and exclusive vine-ripened tomatoes. |
|||||
| Ransomware | ggroupcpas.com id29527 View details | United States | Finance / Legal / Insurance | ||
|
Goldklang Group CPAs specializes in audit and tax services for homeowners associations, condominiums, and housing cooperatives. With over 40 years of experience, the firm strives to deliver superior results to clients through tailored audit and tax procedures. They emphasize expert knowledge and attention to detail in their work, saving clients over $3 million in just three years. Their target audience is homeowners associations seeking reliable and competent financial services. |
|||||
| Ransomware | businessrecord.com id29528 View details | United States | Other | ||
|
BusinessRecord.com provides RSS feeds free of charge for personal, non-commercial use. If you embed an RSS feed on a personal website, please include a link back to Business Record. Business Record reserves the right to request that you cease distributing these feeds at any time and for any reason. |
|||||
| Ransomware | sphvalue.com id29529 View details | Finance / Legal / Insurance | |||
|
Since 1992, our team of experts in economics, accounting, finance, and valuation has earned an impeccable reputation for relentless analysis and exemplary quality work. Clients trust Sanli Pastore & Hill's expert opinions, unparalleled research, and in-depth analysis in critical business situations. |
|||||
| Ransomware | ennsco.ca id29530 View details | Canada | Finance / Legal / Insurance | ||
|
Enns & Company Professional Corporation is a leading accounting and audit firm providing entrepreneurs with a full range of services, including auditing, tax consulting, financial reporting, and business advisory services, with an emphasis on teamwork and a personalized approach. |
|||||
| Ransomware | arsenalscaffold.com id29531 View details | United Kingdom | Construction / Real Estate | ||
|
Founded in 1998, Arsenal Scaffold Inc. specializes in providing professional scaffolding and vertical access solutions, including tubular and system scaffolding, formwork, and construction hoists. The company is committed to exceptional service, safety, and quality workmanship, ensuring every project meets the highest industry standards. |
|||||
| Ransomware | Heartland Growers id29335 View details | United States | Retail / E-commerce | ||
|
Heartland Growers is a full-service wholesale greenhouse located in Westfield, Indiana, owned and operated by the Gapinski Family since 1984. The company supplies wholesale plants to independent garden centers, florists, landscapers, and national chain stores throughout the Midwest. With a modern and capital-intensive facility covering over 30 acres, Heartland Growers produces a variety of plants including bedding plants, geraniums, lilies, and hanging baskets. The company is committed to maintaining quality and service as top priorities for its customers |
|||||
| Ransomware | HELIX INTERNATIONAL id29336 View details | United Kingdom | Healthcare / Pharma | ||
|
Helix International is a software platform and managed services provider specializing in enterprise content management and data migration. They cater to medium, large, and Fortune 500 companies across various industries, including healthcare, finance, retail, and entertainment. The company offers a variety of solutions, such as custom development, hosting, and GDPR compliance, enabled by their advanced software platform and proprietary extraction tools. With a track record of 100% project success and partnerships with major firms like IBM, Helix International is recognized for its ability to manage and optimize complex data environments. |
|||||
| Ransomware | Prologic Construction id29337 View details | Canada | Education | ||
|
Prologic Construction is a trusted general contractor based in Alberta, specializing in high-quality construction solutions for both public and private sectors since 1999. The company offers a full range of services including commercial, institutional, and municipal projects, ensuring timely completion and adherence to budget. With a commitment to quality craftsmanship and competitive pricing, Prologic Construction has built a strong reputation for reliability and expertise. Their portfolio includes various projects such as school modernizations, arena renovations, and healthcare facilities, reflecting their dedication to excellence and community development |
|||||
| Ransomware | Le Pain Quotidien US id29310 View details | United States | Hospitality / Food & Beverage / Tourism | ||
|
Established in 1990 and headquartered in New York, New York, Le Pain Quotidien US is a chain of bakery restaurants specializing in baked goods, bread, salads, sandwiches, beverages, tartines, and more. |
|||||
| Ransomware | Vega id29282 View details | Manufacturing / Engineering | |||
|
Vega combines elite technical skills with personalized customer service and environmental stewardship to excel in the industrial and manufacturing sector. From the loading docks through the warehouse, assembly line, raw product processing, storage, distribution and into the administration areas, the company's work is designed to support the company's customer's operations in the production of everything from fabrication to perishables. "I/the company continue to use Vega not because the company has to but because the company want to. Vega brings a lot of knowledge and experience with them to the table and adds a great amount of value to the company's projects. The company value the company's relationship with them and expect it to continue for a long, long time |
|||||
| Ransomware | ZFG ALTHERM Engineering id29274 View details | Austria | Manufacturing / Engineering | ||
|
ZFG ALTHERM Engineering GmbH specializes in engineering services for technical building equipment. The company focuses on providing high-quality planning and consulting solutions tailored to complex and technically demanding projects. With a commitment to precision, know-how, and experience, they strive to develop individualized solutions for each client. Their target clients include those seeking specialized engineering services in the field of technical building infrastructure. |
|||||
| Ransomware | TAURUS INVESTMENT HOLDINGS id29275 View details | Cyprus | Finance / Legal / Insurance | ||
|
Established in 1976, Taurus is a global real estate private equity firm with over 40 years of experience as a general partner, investor, and operator. Currently active in the United States, Western Europe, Asia, and South America, the firm makes strategic investments into value-add, core-plus, and development opportunities. Throughout North America and Europe, Taurus is consistently recognized as one of the premier owner operators of both directly managed and joint venture commercial real estate. To date, Taurus has purchased and developed more than 54 million square feet (5.01 million square meters) of residential, office, industrial, retail and other commercial real estate assets throughout the world with a total acquisition value of over $8 billion. www.tiholdings.com |
|||||
| Ransomware | Plan id29202 View details | United States | Telecommunications | ||
|
Founded in 2013, Plan.com works with businesses using their platform to find telecom solutions. They are headquartered in Douglas, Isle of Man |
|||||
| Ransomware | Ingelan id29205 View details | Spain | Construction / Real Estate | ||
|
Ingelan is a provider of engineering solutions for systems and communications environments. It specializes in security of information systems, information systems architecture, communications, and automation of plant systems. The company was founded in 1993 and is headquartered in ??Barcelona, Spain |
|||||
| Ransomware | AdvancedHEALTH. id29187 View details | United States | Finance / Legal / Insurance | ||
|
ouradvancedhealth.com is the website for AdvancedHEALTH, a Tennessee-based independent physician group serving the United States through a broad multi-specialty healthcare network. The organization says it includes more than 550 experienced providers across 40 specialties, with site functions for home, about, careers, specialties, providers, locations, and patient login access. In a threat-intelligence context, the domain falls within a US healthcare organization that intersects with finance, legal, and insurance workflows. It was listed as a ransomware victim associated with DragonForce. |
|||||
| Ransomware | AdvancedHEALTH id29186 View details | United States | Finance / Legal / Insurance | ||
|
The leak contains 2,300,000 Lines of FULL patient data, partner agreements, management, payroll and HR files. Screenshot attached :) We Will Leak 1,000 Lines of patient data a day, until we've been paid or the timer hits 0. Check this description for Fresh leaks everyday. Day 1 : https://temp.sh/aLnBB/ADI-Day1.zip Day 2 : Expect it around 5PM UTC |
|||||
| Ransomware | LeRoy Surveyors & Engineers id29167 View details | United States | Construction / Real Estate | ||
|
LeRoy Surveyors & Engineers, INC. specializes in property boundary surveying, topographic surveys, and subdivision surveys, primarily serving clients in the Puyallup area. With a commitment to quality and a history of excellence since 1958, they provide comprehensive surveying and engineering services to both public and private sectors. Their expertise includes civil engineering, geotechnical services, and environmental engineering, ensuring compliance with local regulations and effective project planning. The company aims to support architects, engineers, developers, and municipalities in making informed decisions about land development. |
|||||
| Ransomware | Advanced Medical Consultants id29173 View details | United States | Finance / Legal / Insurance | ||
|
The leak contains 2,300,000 Lines of FULL patient data, partner agreements, management, payroll and HR files. Screenshot attached :) We Will Leak 1,000 Lines of patient data a day, until we've been paid or the timer hits 0. Check this description for Fresh leaks everyday. Day 1 : https://temp.sh/aLnBB/ADI-Day1.zip |
|||||
| Ransomware | MicroMarketing id29132 View details | Hospitality / Food & Beverage / Tourism | |||
|
MicroMarketing specializes in expert title selections for books, audio CDs, and DVDs, catering primarily to librarians and libraries. The company is known for its personalized service, ensuring that clients receive timely and efficient support without automated responses. They offer valuable services such as downloadable invoices and MARC records, along with a strong price-value proposition. MicroMarketing's commitment to quality and customer satisfaction has garnered positive testimonials from clients who appreciate their reliable and responsive service |
|||||
| Ransomware | Pamil Modulsystem id29133 View details | Sweden | Construction / Real Estate | ||
|
Pamil Modulsystem specializes in renting flexible modular buildings tailored for various needs, including offices and schools. Established in 1963, the company focuses on providing high-quality, customizable solutions that enhance work and learning environments. They manage the entire process from planning and construction to maintenance, ensuring a seamless experience for their clients. Committed to sustainability, Pamil emphasizes circular building practices by renovating returned modules for future use. |
|||||