ransombay

Analyst brief

RansomBay is a new ransomware group that launched on April 24, 2025, operating under the DragonForce initiative. It is a crime-motivated threat actor primarily targeting organizations for financial gain. Since no specific TTPs or tools are provided, defenders should focus on common tactics associated with DragonForce ransomware families, such as double extortion combining data exfiltration and encryption. It is advisable to prioritize regular critical system backups, network segmentation, and phishing awareness training.