Ethical Hacking News
A turf war between rival ransomware groups, DragonForce and RansomHub, threatens to increase risks for corporate victims and potentially lead to extortion attempts targeting the same companies. The conflict has significant implications for corporate victims and highlights the need for robust cybersecurity measures to protect against ransomware attacks.
The turf war between rival ransomware groups DragonForce and RansomHub threatens to increase risks for corporate victims.The conflict is a classic example of a turf war in the hacking world, with cybercriminals trying to outdo each other by attacking and extorting the same target.The global cost of cybercrime is estimated to reach $10 trillion in 2025, according to Cybersecurity Ventures.The volatility of the situation could make companies' defense and response tactics more vulnerable.The rivalry between DragonForce and RansomHub has significant implications for corporate victims, highlighting the need for robust cybersecurity measures to protect against ransomware attacks.
The cybersecurity landscape is abuzz with news of a brewing turf war between rival ransomware groups, DragonForce and RansomHub. The conflict, which has been escalating over the past few months, threatens to increase risks for corporate victims and potentially lead to extortion attempts targeting the same companies.
According to experts tracking the battle, DragonForce, a group of largely Russian-speaking cybercriminals behind a spate of high-profile attacks this year, has clashed with RansomHub, one of its biggest competitors in the ransomware-as-a-service (RaaS) market. The relationship between the two groups soured after DragonForce rebranded itself as a "cartel" in March, expanding its services and reach to attract more affiliate partners.
The tension came to a head when RansomHub's site was taken down with a marker left stating "R.I.P 3/3/25", believed to be a hostile takeover by DragonForce. In retaliation, a RansomHub member defaced DragonForce's site, labeling them "traitors."
"This is a classic example of a turf war in the hacking world," said Toby Lewis, global head of threat analysis at Darktrace. "Most cybercrime groups have an ingrained need for kudos and one-upmanship that could lead them to attempt to 'outcompete' each other by trying to attack and extort the same target."
The conflict has significant implications for corporate victims, who may be targeted by both DragonForce and RansomHub in their efforts to outdo each other. "No honor among thieves" is a phrase that echoes through the hacking world, where cybercriminals operate with little regard for ethics or consequences.
RaaS gangs function by selling tools and infrastructure needed to access internal systems of companies and extort them for money. They operate on the dark web, where they battle to sell services to affiliates, such as Scattered Spider, which has been linked to the M&S attack and last week's hack on Australian airline Qantas.
The global cost of cybercrime is estimated to reach $10 trillion in 2025, according to Cybersecurity Ventures. The figure, which is up from $3 trillion in 2015, comes as hacker groups have increasingly looked to maximize profit through their attacks.
Jake Moore, global cybersecurity adviser at ESET, warned that the volatility of the situation could make companies' defense and response tactics more vulnerable. "Remember this is a Wild West, lawless environment where normal competition rules simply do not apply," he said.
The relationship between DragonForce and RansomHub soured after the former rebranded itself as a cartel in March, which widened its services and expanded its reach to attract more affiliate partners. The conflict has raised concerns about the potential for companies to be extorted twice, with both groups attempting to take advantage of the situation.
In 2024, RansomHub reported around 500 victims on its site, while DragonForce listed a total of 82 victims on its dark-web site in the following 12 months. The rivalry between the two groups has significant implications for corporate victims and highlights the need for robust cybersecurity measures to protect against ransomware attacks.
In conclusion, the turf war between rival ransomware groups raises serious concerns about the potential for increased risks for corporate victims and the volatility of the situation could make companies' defense and response tactics more vulnerable. The global cost of cybercrime is estimated to reach $10 trillion in 2025, highlighting the need for robust cybersecurity measures to protect against ransomware attacks.
Related Information:
https://www.ethicalhackingnews.com/articles/The-Cybercrime-Arms-Race-How-a-Turf-War-Between-Ransomware-Groups-Could-Put-Corporate-Victims-at-Risk-ehn.shtml
https://arstechnica.com/security/2025/07/no-honor-among-thieves-ms-hacking-group-starts-turf-war/
Published: Mon Jul 7 15:38:25 2025 by llama3.2 3B Q4_K_M
