DragonForce Variant Linked to New DEVMAN Threat Actor

A new DragonForce variant linked to the emerging DEVMAN threat actor has raised concerns among cybersecurity analysts due to unusual behavior in its code. Researchers discovered that the ransomware sample encrypts its own ransom note, a rare trait that complicates both analysis and victim response. The anomaly suggests a possible attempt to evade detection or signal a developing tactic by the group.

The DragonForce variant linked to DEVMAN stood out not only for its self-encrypting note but also for other “oddities” in its execution process. Experts are still examining the sample to determine whether these characteristics represent a broader trend or a one-off experiment. The ransomware’s design could indicate early testing by a new player seeking to establish a foothold in an already competitive threat landscape.

For a detailed breakdown of the ransomware’s behavior and the latest findings, read the full report at the official source below.
https://www.scworld.com/news/dragonforce-ransomware-variant-tied-to-emerging-devman-threat-actor