direwolf
ransomware group · aka Dire Wolf, DireWolf, direwolf · unknown · active since 2025-03 (first public reporting and leak-site listings; earliest activity unknown)
Dire Wolf is a ransomware and data-extortion group first publicly reported in March 2025, operating a Tor-based leak site and using a double-extortion model of data theft plus encryption. Vendor research (notably Broadcom/Symantec in 2025) documented rapid intrusions against small and mid-sized organizations across multiple regions, with attackers using bring-your-own-vulnerable-driver (BYOVD) techniques to disable EDR and living-off-the-land tooling for discovery and staging. Attribution and the initial-access vector remain publicly unknown, and no specific CVEs have been tied to the group in available vendor reporting. This dashboard tracked 11 newly listed victims between 2026-09-04 and 2026-09-09, spanning technology, healthcare, logistics, and financial services.
- Deploys Windows ransomware combined with data theft; posts stolen data to a Tor leak site when demands are unmet (vendor and leak-site reporting, 2025)
- Uses BYOVD abuse of vulnerable signed drivers to terminate or blind EDR agents (Symantec/Broadcom, 2025)
- Living-off-the-land binaries and native Windows tools for reconnaissance and staging (vendor reporting, 2025)
- Targets primarily small and mid-sized organizations across multiple industries and regions (vendor reporting, 2025)
- Ransom notes instruct victims to contact the group for negotiation; published details of the payment channel are limited (unknown)
- Initial access vector not publicly confirmed (unknown)
Wolfram Research (leak-site listing, Sep 2026), Lightcast (leak-site listing, Sep 2026), RelyComply AML Platform (leak-site listing, Sep 2026), eAssist Dental Solutions (leak-site listing, Sep 2026), Precision Vehicle Logistics (leak-site listing, Sep 2026), Mission Pet Health (leak-site listing, Sep 2026), Pride Purple Group (reported Dire Wolf victim, 2025)
No public figure.
Leak-site victims137 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| AAM:HOA Management | · Aug 15, 2026 | — |
| Leafwell | · Aug 11, 2026 | — |
| BigSpark | · Aug 11, 2026 | — |
| Chat Jurídico | · Aug 11, 2026 | — |
| Merge | · Aug 11, 2026 | — |
| AliveCor, Inc. | · Aug 10, 2026 | — |
| Statista GmbH | · Aug 10, 2026 | — |
| Quironsalud | · Aug 10, 2026 | — |
| Health Carousel | · Aug 10, 2026 | — |
| Fondo | · Aug 10, 2026 | — |
| Osmo Wallet | · Aug 10, 2026 | — |
| Swyft Inc. | · Aug 10, 2026 | — |
| Jewelex | · Jun 12, 2026 | — |
| Clínica Vida | · Jun 12, 2026 | — |
| Did Asia | · Jun 12, 2026 | — |
| Nueva Pescanova Group | · Jun 12, 2026 | — |
| Tepco-Group | · Jan 13, 2026 | — |
| Perdana Petroleum Berhad | · Jan 13, 2026 | — |
| Chemsain Konsultant Sdn Bhd | · Jan 13, 2026 | — |
| Bauerfeind | · Jan 9, 2026 | — |
| Mohammad Omar Bin Haider Holding Group | · Jan 9, 2026 | — |
| KwikLedgers | · Jan 4, 2026 | — |
| Laurenzano Logistics | · Jan 4, 2026 | — |
| Sunzen Biotech Berhad | · Jan 4, 2026 | — |
| Varimed Medikal | · Jan 4, 2026 | — |
| Hydrodiseño | · Jan 4, 2026 | — |
| Bina Darulaman Berhad | · Jan 4, 2026 | — |
| PernelMedia | · Jan 4, 2026 | — |
| Polaris Parks | · Dec 23, 2025 | — |
| Ranger Investigation Guard | · Dec 23, 2025 | — |
| Office of Public Sector Anti-Corruption Commission | · Dec 23, 2025 | — |
| Guan Chong Berhad | · Dec 23, 2025 | — |
| Sanyang Motor | · Dec 23, 2025 | — |
| Adnan Sundra & Low | · Dec 23, 2025 | — |
| K.M. Packaging | · Dec 22, 2025 | — |
| MITACHI | · Dec 22, 2025 | — |
| Kingsford Group | · Dec 22, 2025 | — |
| International Freight & Commerce | · Dec 22, 2025 | — |
| Transpedrosa | · Dec 22, 2025 | — |
| Clemar Assessoria e Logística em Comércio Internacional | · Dec 22, 2025 | — |
| Meinhardt Malaysia | · Dec 22, 2025 | — |
| Electricidad Panamericana | · Dec 22, 2025 | — |
| Coral | · Nov 13, 2025 | — |
| Hyundai Nishat Motor | · Nov 13, 2025 | — |
| YPC MALAYSIA | · Nov 13, 2025 | — |
| Speed Inter Transport | · Oct 14, 2025 | — |
| Miguel Veiga, Neiva Santos e Associados. | · Oct 14, 2025 | — |
| Purwana Group | · Sep 7, 2025 | — |
| Taiwan Flex Electronics | · Sep 7, 2025 | — |
| Aroeira Salles Advogados | · Aug 25, 2025 | — |
In the newsAll →
No articles mention this group yet.