CipherForce is a new ransomware group targeting technology and logistics sectors worldwide.
CipherForce is a newly emerged ransomware group first detected in early 2026, operating a dark web leak site. The group targets technology, business services, and logistics companies across the US, China, Vietnam, India, and the UAE. Their primary TTPs include ransomware deployment and double extortion via a dark web leak site to pressure victims. Defenders should focus on enforcing multi-factor authentication, maintaining robust backup procedures, and conducting dark web monitoring for potential data leaks.
CipherForce is a newly emerged ransomware group first detected in early 2026, operating a dark web leak site and targeting technology, business services, and logistics companies across the US, China, Vietnam, India, and UAE, with at least 6 claimed victims.
CipherForce targets technology, business services, and logistics sectors.
Defenders should enforce multi-factor authentication (MFA), maintain robust backup procedures, and conduct dark web monitoring for potential data leaks.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.