• Ransomware Group Turf War: The ransomware group linked to UK retailers' cyberattacks has started a turf war with rivals. DragonForce (largely Russian-speaking cyber criminals) has clashed with RansomHub.
• RaaS Market Risks: The conflict between the two RaaS groups increases risks for companies, including potential double extortion. Hacking groups sell tools to access companies' internal systems and extort money.
• Specific Events: DragonForce rebranded as a "cartel" in March, expanding services and reach. RansomHub's site was taken down by DragonForce. A RansomHub member defaced DragonForce's site. DragonForce is believed behind attacks on other rivals.
• Example of Double Extortion: US company UnitedHealth Group was victimized last year due to a fallout between hacking groups. In one case, Notchy tried to extort a second ransom after the initial fee was stolen.
• Cost and Vulnerability: The global cost of cybercrime is estimated to reach $10 trillion in 2025. The situation's volatility makes companies' defence and response tactics more vulnerable.
• Victim Numbers: In 12 months after being identified in August 2023, DragonForce listed 82 victims on its dark-web site. RansomHub reported about 500 victims in 2024.
• Warning: Cybersecurity adviser Jake Moore warned that it's a lawless environment where normal competition rules don't apply.