DragonForce, Qilin, and LockBit announced the partnership in early September, with DragonForce proposing the collaboration shortly after LockBit reemerged with its LockBit 5.0 ransomware variant.Three of the most notorious ransomware-as-a-service operations have formed a criminal cartel aimed at coordinating attacks and sharing resources in what they describe as an increasingly “challenging” ransomware business environment.The alliance comes as ransomware operators face mounting pressure from law enforcement disruptions. In February 2024, international authorities seized LockBit’s infrastructure, arrested members, and issued a warrant for the group’s alleged leader, significantly eroding affiliates’ trust in the once-dominant operation. Is the alliance allowed to operate like a shadow government ?

