Active ransomware operator

DIRE WOLF

aka direwolf · 0 victims indexed

Victims indexed

—

Active period

—

Countries hit

At a glance

Status: active
Aliases: direwolf
First seen: —
Last activity: —
Onion sites: 1 known endpoint

References

4 links

External sources curated by the MISP threat-intel community.

ransomlook.io/group/direwolf
trustwave.com/en-us/resources/blogs/spiderlabs-blog/dire-wolf-strikes-new-ransomware-group-targeting-global-sectors/
darkreading.com/threat-intelligence/dire-wolf-ransomware-manufacturing-technology
watchguard.com/wgrd-security-hub/ransomware-tracker/dire-wolf

Recent victims

Loading…

Onion infrastructure

1 known

http://direwolfcdkv5whaz2spehizdg22jsuf5aeje4asmetpbt6ri4jnd4qd.onion

Source

Updated recently

Data on this page is sourced from the group's own leak posts, cross-checked with public ransomware trackers (RansomLook, ransomware.live, RansomWatch), MITRE ATT&CK, and our own Tor and Telegram crawlers. This is a public observatory page — share freely.

Operator dossier

At a glance

References

Recent victims

Onion infrastructure

Source