GambleForce

Linked to China by one source.

Reports: 2
Last reported: 6 April 2026
Known CVEs: 1
Origin: China

ID: gambleforce
Sources: MISP ETDA Malpedia
Merge evidence: 2 alias matches

Reports per quarter

2024 Q1: 1 report
2024 Q2: no reports
2024 Q3: no reports
2024 Q4: no reports
2025 Q1: no reports
2025 Q2: no reports
2025 Q3: no reports
2025 Q4: no reports
2026 Q1: no reports
2026 Q2: 1 report

Dated reports, 2024 Q1 to 2026 Q2.

CVEs named in reports

CVE-2023-23752 KEV

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

6 April 2026

Exposing GambleForce, an SQL injection gang | Group-IB Blog

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor Exposing GambleForce, an SQL injection gang | Group-IB Blog
6 February 2024

ResumeLooters infect websites in APAC | Group-IB Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor ResumeLooters infect websites in APAC | Group-IB Blog

Newest first. Details opens the report in Explore.