Ransombay is a data leak site and white-label branding service introduced by the DragonForce ransomware group in early 2025, enabling affiliates to operate under disguised ransomware strains. DragonForce, which emerged in August 2023 primarily out of Malaysia and is focused on financial gain through a multi-extortion model, established RansomBay to host data stolen by its affiliates. The group takes a 20% share of successful ransomware payouts and aims to build a 'Ransomware Cartel' ecosystem by providing infrastructure, malware, and support services. While DragonForce has claimed that the closely associated RansomHub ransomware-as-a-service (RaaS) operation joined its cartel, RansomHub has publicly denied this, though reports suggest RansomHub affiliates may be utilizing DragonForce's shared infrastructure or are a rebrand of former BlackCat affiliates. Ransombay represents DragonForce's strategic evolution to profit from a broader network of ransomware operations.

URLs nuevas detectadas en IntelTracker