Skip to content
Ransomware group

Flocker

Flocker is a ransomware threat actor, also referred to as “FSociety ransomware.” In June 2025, CYFIRMA reported (based on underground forum observations) that Flocker/FSociety claimed to have compromised the Department of Land and Real Estate Regulation in Ajman, United Arab Emirates.

Profile source: Mallory opens in a new tab

Flocker

Family profile

Flocker is a ransomware threat actor, also referred to as “FSociety ransomware.” In June 2025, CYFIRMA reported (based on underground forum observations) that Flocker/FSociety claimed to have compromised the Department of Land and Real Estate Regulation in Ajman, United Arab Emirates. No additional high-confidence details on Flocker’s tooling, initial access methods, victimology beyond this claim, or specific tactics/techniques are provided in the available content.

Ransomware.live

Operational record

View group record ↗

We appreciate you

Derp wouldn't exist without the work these projects do for the security community. We rely on their data sources to improve the quality and depth of what we publish. Thank you, we're genuinely grateful.