DEVMAN Ransomware: Analysis of New DragonForce Variant  - ANY.RUN’s Cybersecurity Blog

A new ransomware variant, DEVMAN, appears to be a modified version of DragonForce, utilizing its codebase but with unique traits and identifiers. The DEVMAN sample exhibits unusual behaviors, such as encrypting its own ransom notes and displaying a lack of external C2 communication. Despite its experimental nature and flaws, the DEVMAN variant highlights the evolving landscape of ransomware-as-a-service and the emergence of new threat actors.