DragonForce

DragonForce is a hacktivist group based in Malaysia that has been involved in cyberattacks targeting government institutions and commercial organizations in India. They have also targeted websites affiliated with Israel and have shown support for pro-Palestinian causes. The group has been observed using defacement attacks, distributed denial-of-service attacks, and data leaks as part of their campaigns. DragonForce Malaysia has demonstrated an ability to adapt and evolve their tactics over time.

Recent activity

• the DragonForce ransomware group has published 113 GB of data from China based Zhito Technology
  mastodon · Oct 28, 2026

References

• https://www.darkowl.com/blog-content/hacktivist-groups-use-defacements-in-the-israel-hamas-conflict/
• https://blog.radware.com/security/2023/05/india-one-of-the-most-targeted-countries-for-hacktivist-groups/
• https://securitybrief.asia/story/dragonforce-malaysia-attacks-israeli-institutions-radware
• https://www.radware.com/security/threat-advisories-and-attack-reports/opisrael-a-decade-in-review/
• https://blog.radware.com/security/ddos/2022/08/this-was-h1-2022-part-3-beyond-the-war/
• https://www.fortinet.com/blog/threat-research/guidance-on-hacktivist-operation-opspatuk-by-dragonforce
• https://www.ransomlook.io/group/dragonforce

From the MISP threat-actor galaxy, MITRE ATT&CK and RansomLook (CC BY 4.0). Activity is any post or advisory Watch Floor collected that names the actor or one of its aliases.