Threat actor reference

Classification follows the source dataset. Metadata is useful. It is not testimony.

Actor lineage

Global lineage directory

Overview

No evidence-backed lineage profile is currently published for this source label. The absence of a record is not evidence that the actor has no aliases or relationships.

Documentary media

Neutral archive placeholder silhouette
No verified documentary image available.

Known aliases

No source-supported alias is currently recorded. Malware names and actor-group names are not assumed to be equivalent.

Historical timeline

No sourced timeline event is currently recorded for this label.

Lineage and relationships

No evidence-backed relationship is currently recorded. Similar code, language, infrastructure style, or negotiation behavior is not enough on its own.

Predecessors

None established.

Successors

None established.

Splits and mergers

None established.

Suspected affiliate relationships

None established.

MITRE ATT&CK integration

No explicit MITRE ATT&CK group mapping is published for this source label. Software entries and fuzzy name matches are not promoted to group mappings.

External intelligence references

No curated external intelligence reference is currently attached.

Confidence and evidence notes

Confidence applies to each individual alias, event, or relationship—not to the actor page as a whole. “Confirmed” requires explicit authoritative attribution or multiple strong independent sources. Moderate, low, disputed, and unknown entries retain the source's uncertainty. A malware-family name is not automatically an actor identity, and shared code or affiliates do not prove shared leadership.

Search within this collection

Negotiation records

Filter Dragonforce records

Collection: 14 records · 375 messages

Dragonforce negotiation record collection
Participants Source Archive status
Not recorded 058f4b92-ae99-45c7-bf35-5d2d6754b3de 19 DragonForce, Victim JSON Indexed
Not recorded 05f724f8-906e-4739-8177-815852cc2c3f 29 DragonForce, Victim JSON Indexed
Not recorded 29BBE03074FDBB8D 10 dragonforce, victim, Victim JSON Indexed
Not recorded 7A313D13EB6B4E58 32 Attacker, Victim JSON Indexed
Not recorded 89716D29D2CEE36F 23 DragonForce, Victim JSON Indexed
Not recorded AB0404E049514B50 28 Attacker, Victim JSON Indexed
Not recorded b8e14e1a-548f-4eec-bd6e-a590126e57c9 14 threat_actor, Victim JSON Indexed
Not recorded BD004D632D87DBA0 25 DragonForce, Victim JSON Indexed
Not recorded C2A3C7249797F5ED 66 dragonforce, victim JSON Indexed
Not recorded C42CDF65B97D0E92 30 dragonforce, victim JSON Indexed
Not recorded C7CD31EAAF9DE9AC 71 Attacker, Victim JSON Indexed
Not recorded C8479B30418B331E 4 Attacker, Victim JSON Indexed
Not recorded D6DDD9B26D7D41DB 14 Attacker, Victim JSON Indexed
Not recorded FDA8141B6DD392E3 10 DragonForce, Victim JSON Indexed