# DevMan RaaS Platform: A Comprehensive Hub for Ransomware Operations

*Published July 27, 2026*
*Source: [https://thehackernews.com/2026/07/devman-raas-portal-centralizes-payload.html](https://thehackernews.com/2026/07/devman-raas-portal-centralizes-payload.html)*

## Executive Summary

DevMan's ransomware-as-a-service platform centralizes key operations for affiliates, providing tools for payload creation and victim management. The platform's evolution and recent whistleblower exposure highlight both its sophisticated design and vulnerabilities.

## Article

The DevMan ransomware-as-a-service platform, tracked by Swiss cybersecurity firm PRODAFT under the name Funky Mantis, provides a centralized web portal for affiliates to manage the full spectrum of ransomware operations. This platform offers features for building payloads, managing victim interactions, and overseeing financial transactions. The platform's design integrates access brokerage with ransomware deployment and requires affiliates to adhere to specific completion timelines. Since its emergence in April 2025, DevMan has evolved from an affiliate to a standalone operation, with links to notorious groups like Qilin and DragonForce. The platform's latest version, released in January 2026, enhances functionality with structured victim records, team management options, and advanced tracking capabilities. The ransomware, primarily targeting sectors like technology and healthcare in the U.S., has accounted for 184 victims to date. DevMan's operations suffered a setback in mid-2025 when identities were exposed by a whistleblower, leading to some affiliates abandoning the scheme. The group's targeting policy excludes CIS countries and certain healthcare sectors, but it encourages attacks on critical infrastructure and the use of specialized SCADA lockers. The platform's governance model restricts affiliate autonomy, emphasizing administrator control over operations. The recent controversy involving a Huntress employee allegedly sharing law enforcement communications with DevMan underscores the ongoing challenges in cybersecurity collaboration and the risks of insider threats.