Overview

DragonForce is a ransomware operation observed as the payload in advanced citrixbleed-2 exploitation chains tracked by huntress in H1 2026.

Recent Developments

  • 2026-07-09: Deployed in most progressed CitrixBleed 2 case—encryption reached single host due to rapid Huntress triage; <1 hour from initial access in one incident (2026-07-10-citrixbleed-2-cybersecuritynews)

Sources