Deep dive into DragonForce ransomware and its Scattered Spider connection

DragonForce ransomware operation expanded in 2025 through collaboration with English-speaking hackers known as Scattered Spider. The partnership combines DragonForce's ransomware capabilities with Scattered Spider's advanced social engineering and initial access techniques. This collaboration enables coordinated, multistage intrusions across major enterprise environments. Acronis provides analysis of how this partnership enhances both groups' operational effectiveness. The alliance represents a significant evolution in ransomware operations, combining different specializations for more sophisticated attacks.