DragonForce — ransomware-as-a-service operator exploiting SimpleHelp RMM
actor · actor:DragonForce
Coverage timeline
1
first 2026-05-07 → last 2026-05-07
Briefs
1
1 distinct
Sources cited
6
4 hosts
Sections touched
1
active_vulns
Co-occurring entities
0
no co-occurrence
Story timeline
- 2026-05-07CTI Daily Brief — 2026-05-07
Where this entity is cited
- active_vulns1
Source distribution
- nvd.nist.gov3 (50%)
- helpnetsecurity.com1 (17%)
- securityboulevard.com1 (17%)
- windowsforum.com1 (17%)
All cited sources (6)
- nvd.nist.govprimaryinlineNVD CVE-2024-57726https://nvd.nist.gov/vuln/detail/CVE-2024-57726
- nvd.nist.govprimaryinlineNVD CVE-2024-57728https://nvd.nist.gov/vuln/detail/CVE-2024-57728
- nvd.nist.govprimaryinlineNVD CVE-2024-7399https://nvd.nist.gov/vuln/detail/CVE-2024-7399
- helpnetsecurity.cominlineHelp Net Security, 2025-05-06https://www.helpnetsecurity.com/2025/05/06/exploited-vulnerability-software-managing-samsung-digital-displays-cve-2024-7399/
- securityboulevard.cominlineSecurity Boulevard, 2026-04-24https://securityboulevard.com/2026/04/cisa-warns-of-multiple-simplehelp-vulnerabilities-exploited-in-attacks/
- windowsforum.cominlineWindowsForum, 2026-04-24https://windowsforum.com/threads/cisa-adds-4-kev-flaws-patch-samsung-magicinfo-simplehelp-d-link-dragonforce-ransomware-april-2026/
Items in briefs about DragonForce — ransomware-as-a-service operator exploiting SimpleHelp RMM
No parsed item heading or body matches this entity yet. Items match by exact CVE id (for CVE entities), by lead-segment substring of the title in the item heading or body, or by a distinctive anchor token from the title appearing in the item heading. Coverage that lives inside a broader section (no per-item heading) is captured by the Story timeline above.