AHMED MUBARAK DEBT COLLECTION
Attack Intelligence
AHMED MUBARAK DEBT COLLECTION was compromised in a ransomware attack attributed to dragonforce in March 2026. The organization, operating in the Financial Services sector in UAE, was added to the group's data leak site as part of an extortion campaign.
dragonforce operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.
With over 14 years of experience, Ahmed Mubarak Debt Collection (AMDC) is licensed by the Government of Sharjah as “Debt Collectors” for consumer & commercial debts. We specialize in the recovery of bad debts with a strong sense of sustaining the client’s relationships. Remedial management is our forte, and we have helped our clients keep and further develop the existing relationship with their consumers. Contrary to what people may think, the art of collections is more than just asking for money. It is about knowing who you are speaking to before you pick up the phone. Knowing their financials, assessing their credit, locating assets, and using a range of psychological techniques to engage on an individual basis. With sophisticated world class practices, the AMDC team is well versed in the relevant laws & regulations to maximize results. Relevant case law that pertains to whatever the situation dictates. AMDC uses this information to support its collection efforts and educate the debtor as to why, based on their legal responsibility, it is in their best interest to pay. The law, when it is on your side, is the best advantage you can have.
Intelligence correlations link this incident to 1 vulnerability(ies) including CVE-2025-5777, which may have been leveraged as initial access vectors or for lateral movement.