- DragonForce net worth is split into two worlds: the speed metal legends and a massive ransomware group.
- The band makes millions from touring and their viral hits, while the hacker group has hit 353 victims and offers an 80% cut to their partners.
- The hackers recently launched a data audit service for targets with over $15 million in yearly revenue.
- Big UK retailers like Harrods and M&S were part of the 2025 waves that boosted the group's underground bankroll.
If you are here to talk about the fast guitars and the legendary Herman Li, you already know DragonForce is a household name in the metal world. But in 2026, the name DragonForce carries a lot of weight in a much darker corner of the internet too. There is a whole other side to this name that is pulling in massive amounts of cash through digital heists. Whether we are talking about record breaking guitar solos or record breaking ransom demands, the money involved is huge. Let's break down the tea on how both sides of the DragonForce name are stacking their chips this year.
The Band Side: Through the Fire, Flames, and Massive Payouts
The speed metal titans have been around the block, and their bank accounts show it. Between massive tours and the fact that everyone and their cousin has played Through the Fire and Flames on a plastic guitar, the band has built a rock solid empire. When people ask about DragonForce earnings, they are usually looking at the heavy hitters like Herman Li.
Herman Li has used his fame to build a brand that goes way beyond just playing shows. He is a master of streaming and tech, which has kept the band relevant while other acts from the early 2000s faded away. Touring remains their biggest bread winner. In 2026, the band still pulls in huge crowds at festivals. When you compare them to the Bad Omens net worth or other modern heavy acts, DragonForce holds their own because of their deep catalog and legendary status.
Their revenue does not just come from the door split at a club. It comes from merch, high end guitar deals, and digital royalties that never seem to stop. Since they are such a technical band, fans are always willing to pay for the "how to" side of things. This is why you see so many people looking for things like guitar lessons in Las Vegas to try and match that speed.
The Other DragonForce: The Ransomware Money Machine
Now, here is where things get really wild. Since late 2023, a group called DragonForce has been making headlines for all the wrong reasons. They are a Ransomware as a Service (RaaS) outfit. That is just a fancy way of saying they build the tools to hack big companies and then let other people use those tools for a cut of the profit.
They do not share their tax returns with the public, but we can do the math. They have hit over 353 victims as of 2026. They focus on sectors that have deep pockets, like construction, manufacturing, and big retail. While the band is out here making fans happy, this group is out here making corporate CEOs sweat.
How the DragonForce Hackers Make Their Millions
The money model for the hacker version of DragonForce is pretty simple but very effective. They work on an 80/20 split. If a partner uses their tech to get a $1 million ransom, that partner keeps $800,000. DragonForce takes the other $200,000 just for providing the software and the brand name.
This model has made them a favorite in the underground. They are not just sitting around waiting for checks either. In August 2025, they launched a new "Company Data Audit" service. This service is aimed at businesses that make at least $15 million a year. They go through the stolen data to find the most embarrassing or damaging secrets to use as extra leverage. According to a report by Trend Micro, this group has evolved into a full on cartel.
The 2025 Retail Hit: A Massive Boost to the Bottom Line
The group really stepped up their game in early 2025. They went after some of the biggest names in UK retail. We are talking about places where everyone shops, like Marks & Spencer, Co-op, and even the luxury giant Harrods. These attacks happened between April and June of 2025.
When you hit a brand like Harrods, you are not just looking for a few thousand bucks. You are looking for a massive payday. These high profile hits did two things. First, they brought in a lot of cash. Second, they made the DragonForce name the most feared brand in the cyber world. They even started calling themselves the "Godfather" of the ransomware scene. They are trying to organize other groups like LockBit and Qilin into a giant cartel to keep prices high and profits steady.
Breakdown of Known Targets and Revenue Potential
| Sector | Known Victims | Typical Revenue Target |
|---|---|---|
| Manufacturing | 80+ | $10M – $50M+ |
| Retail | 50+ | High Volume / High Ransom |
| Construction | 40+ | Project based payouts |
| Technology | 35+ | Data heavy targets |
| Logistics | 25+ | Time sensitive pressure |
The group is smart about who they do not hit. They have a self imposed rule about staying away from healthcare. This is not because they have a heart of gold. It is because hitting hospitals brings way too much heat from the government. By sticking to retail and business services, they can stay under the radar longer while still stacking millions.
The Cartel Ambitions: Becoming the "Godfather"
The group is not happy just being one of the many. They want to be the bosses of the whole scene. In late 2025, they started pushing for a "ransomware cartel" model. This allows their partners to keep their own branding while using the DragonForce infrastructure. It is like a franchise model for crime.
They have even been seen defacing the websites of rival groups like BlackLock to show who is really in charge. They claimed they took over the infrastructure of another big rival, RansomHub, though those guys said it was just a case of an inside job or betrayal. Either way, DragonForce is making moves that show they have plenty of money to burn on growth. A blog post from LevelBlue explains that this move toward a cartel is all about stabilizing the market and making sure they get their 20% cut from as many jobs as possible.
Technical Skills: Why They Are So Profitable
You do not get to 353 victims by being bad at your job. The DragonForce group has tools that work on almost everything. Whether a company uses Windows, Linux, or specialized servers like ESXi, these guys have a way in.
They often get their first foot in the door through access brokers. These are other hackers who find a way in and then sell that access to the highest bidder. Groups like Scattered Spider have been linked to this kind of work. Once DragonForce is in, they use "dual extortion". They lock up the files so the company can't work, and they also steal the files so they can threaten to leak them. This double whammy makes it almost impossible for a company to say no to paying.
The Band's 2026 Earnings: More Than Just Music
Back on the music side, the speed metal band is also finding new ways to grow their net worth. Herman Li is a pioneer in the "creator" space for metal. He has a massive presence on platforms where he talks about guitar tech, gaming, and the industry. This creates a diversified income stream that most bands do not have.
While the "Through the Fire and Flames revenue" is the foundation, the modern DragonForce earnings come from a mix of:
- World tours and festival headlining slots.
- Signature guitar and gear deals with major brands.
- Streaming royalties from a 20 plus year career.
- Direct fan support through modern digital platforms.
The band has managed to keep their costs low by being tech savvy themselves. They understand the digital world better than most, which is ironic given the other group sharing their name. Per the Bridewell profile on the hacker group, the name overlap might be a headache for the band's PR team, but it has not slowed down their ticket sales.
Comparing the Two Worlds
It is wild to see how one name can represent two completely different ways of making a fortune. The band builds their wealth through skill, practice, and entertaining millions. The hacker group builds theirs through fear, leverage, and digital skill.
One thing they both have in common is a focus on high speed and high volume. The band plays the fastest solos in the world. The hackers run one of the fastest growing ransom operations in the world. Both are at the top of their respective games in 2026.
The Future of DragonForce Net Worth
Looking ahead, the band is likely to stay steady. They have a loyal fan base that will show up for them as long as they can still play those lightning fast riffs. As long as there are people who want to feel the energy of a power metal show, there will be money coming in for the titans of the genre.
For the hackers, the future is more uncertain but potentially more lucrative. If they succeed in building their cartel, they could become the central hub for all major ransomware activity. This would put their "net worth" into the hundreds of millions, even if it is all in crypto and hidden away. The move toward professionalization and market stabilization shows they are planning for the long haul.
They have already survived rivalries and internal betrayals. They have successfully targeted major world economies like the US, UK, and Germany. As they continue to refine their "data audit" services, the price for a company to get their data back is only going to go up.
Frequently Asked Questions
What is the main source of the DragonForce band's net worth?
The band makes most of their money from touring and merchandise sales. Their viral hit Through the Fire and Flames also brings in constant streaming and licensing revenue from games and media.
How much do DragonForce hackers take from a ransom?
The group usually takes a 20% cut of any ransom paid by a victim. The other 80% goes to the partner or affiliate who actually carried out the attack using the DragonForce tools.
Did DragonForce really hack Harrods and Marks & Spencer?
Yes, in early 2025, the ransomware group claimed they hit several big UK retailers. These attacks were part of a larger surge in activity that helped the group establish their cartel model.
Are the band and the hackers the same people?
No, there is no connection between the speed metal band and the ransomware group. They just happen to share the same name, which has caused some confusion in search results and news reports.
What is a ransomware cartel?
A ransomware cartel is a group of different hacker organizations that work together. They share tools, rules, and infrastructure to make sure they all stay profitable and avoid fighting over the same victims.
How many companies has the DragonForce hacker group hit?
As of the latest tracking in 2026, the group has claimed attacks on over 353 different organizations across the globe, with a heavy focus on the US and Europe.
What is the main source of the DragonForce band's net worth?
The band makes most of their money from touring and merchandise sales. Their viral hit Through the Fire and Flames also brings in constant streaming and licensing revenue from games and media.
How much do DragonForce hackers take from a ransom?
The group usually takes a 20% cut of any ransom paid by a victim. The other 80% goes to the partner or affiliate who actually carried out the attack using the DragonForce tools.
Did DragonForce really hack Harrods and Marks & Spencer?
Yes, in early 2025, the ransomware group claimed they hit several big UK retailers. These attacks were part of a larger surge in activity that helped the group establish their cartel model.
Are the band and the hackers the same people?
No, there is no connection between the speed metal band and the ransomware group. They just happen to share the same name, which has caused some confusion in search results and news reports.
What is a ransomware cartel?
A ransomware cartel is a group of different hacker organizations that work together. They share tools, rules, and infrastructure to make sure they all stay profitable and avoid fighting over the same victims.
How many companies has the DragonForce hacker group hit?
As of the latest tracking in 2026, the group has claimed attacks on over 353 different organizations across the globe, with a heavy focus on the US and Europe.
