DragonForce
Named by 3 kept items in this workspace.
Search every workspace for DragonForce. It matches the name as written, so it can find other things that share it.
The items that name it 3
Ransomware ecosystem used by Storm-2570 affiliate.
Ransomware deployed as the final objective in the most progressed intrusion in the cluster; binary named 1.exe.
All threat actors in this workspace.