Promotion AB
Attack Intelligence
Promotion AB was compromised in a ransomware attack attributed to dragonforce in April 2026. The organization, operating in an undisclosed sector in Sweden, was added to the group's data leak site as part of an extortion campaign.
dragonforce operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.
Etablerad redan 1979 och genom en merger med Eclipse Display 2020 kör vi nu full gas framåt på vår resa att bli nordens bästa partner när det gäller att förenkl...
Intelligence correlations link this incident to 1 vulnerability(ies) including CVE-2025-5777, which may have been leveraged as initial access vectors or for lateral movement.