The ransomware claim alleges that the threat actor Dragonforce has compromised Cobuilder, a digital solutions provider for the construction industry, potentially including complete databases, significantly impacting their operations. The attack has affected Norway.
Incident Details
- Victim: coBuilder
- Country: NO
- Actor: dragonforce
- Source: http://z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion/blog/?post_uuid=82a1de86-1075-45e8-a0ae-ac7c70de8f8f
- Discovered: 2025-06-17 18:23:48.111256
- Published: 2025-06-17 17:58:18.509393
Information
- CoBuilder is a tech company offering digital solutions for the construction industry.
- Their goal is to enhance collaboration, digitalization, and sustainability throughout the entire value chain.
- Their products include asset data management, digital product passports, and sustainability reporting to comply with new regulations.
- Solutions enable seamless information exchange among construction stakeholders by integrating with BIM software via APIs.
- They provide consultancy services to develop digital strategies aimed at optimizing efficiency and reducing costs.
Disclaimer: This post is based on public claims made by the ransomware group "dragonforce". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.