DragonForce Ransomware Exploits SimpleHelp Vulnerabilities to Steal Files, Deploy Encryptors in MSP Supply Chain Attack

The DragonForce ransomware group has exploited vulnerabilities in the remote monitoring and management (RMM) tool SimpleHelp to conduct a supply chain attack targeting a managed service provider (MSP) and its customers. The attackers chained multiple flaws in SimpleHelp to steal files and deploy ransomware encryptors, compromising the MSP's infrastructure and potentially affecting its client base. This incident highlights the ongoing risks associated with supply chain attacks in the cybersecurity landscape.