← Actors

DragonForce

Intel Library

DragonForce

Threat actorMY1 report from 1 vendor· last reported 2026-07-09

DragonForce is a hacktivist group based in Malaysia that has been involved in cyberattacks targeting government institutions and commercial organizations in India. They have also targeted websites affiliated with Israel and have shown support for pro-Palestinian causes. The group has been observed using defacement attacks, distributed denial-of-service attacks, and data leaks as part of their campaigns. DragonForce Malaysia has demonstrated an ability to adapt and evolve their tactics over time.

Vendor aliases (1)

The same group is tracked under different names by different vendors.

VendorName
VariousDragonForce

MITRE ATT&CK techniques (0)

No techniques mapped yet.

Indicators of compromise

No IOCs extracted yet from reports naming this actor.

Report timeline

Every report in the Global Intel Library that names DragonForce, newest first. Open any report to see the full analysis with provenance.

  1. Huntress2026-07-09
    CitrixBleed 2 (CVE-2025-5777) 7Steps to Dragonforce Ransomware | Huntress
    original

Threat feed IOCs (0)

Indicators from free threat feeds (abuse.ch ThreatFox, AlienVault OTX) attributed to DragonForce. Each row shows why it was linked and where it came from.

No feed indicators linked to this actor yet. Feeds are checked every hour.

Public research & publications (6)

Open-source reports about this actor collected from MISP Galaxy.