ZeroHour

direwolf

ransomware group · aka Dire Wolf, DireWolf, direwolf · unknown · active since 2025-03 (first public reporting and leak-site listings; earliest activity unknown)

Victims · 7d
4▼8
Victims · 30d
45active targets
Victims · 90d
62
All-time (tracked)
137since 2025-05-27
Last post
09-14 17:44UTC
Estimated earnings
public reporting
Profile · glm-5.3-flash · updated

Dire Wolf is a ransomware and data-extortion group first publicly reported in March 2025, operating a Tor-based leak site and using a double-extortion model of data theft plus encryption. Vendor research (notably Broadcom/Symantec in 2025) documented rapid intrusions against small and mid-sized organizations across multiple regions, with attackers using bring-your-own-vulnerable-driver (BYOVD) techniques to disable EDR and living-off-the-land tooling for discovery and staging. Attribution and the initial-access vector remain publicly unknown, and no specific CVEs have been tied to the group in available vendor reporting. This dashboard tracked 11 newly listed victims between 2026-09-04 and 2026-09-09, spanning technology, healthcare, logistics, and financial services.

Tactics & tooling
  • Deploys Windows ransomware combined with data theft; posts stolen data to a Tor leak site when demands are unmet (vendor and leak-site reporting, 2025)
  • Uses BYOVD abuse of vulnerable signed drivers to terminate or blind EDR agents (Symantec/Broadcom, 2025)
  • Living-off-the-land binaries and native Windows tools for reconnaissance and staging (vendor reporting, 2025)
  • Targets primarily small and mid-sized organizations across multiple industries and regions (vendor reporting, 2025)
  • Ransom notes instruct victims to contact the group for negotiation; published details of the payment channel are limited (unknown)
  • Initial access vector not publicly confirmed (unknown)
Targeted sectors
technology/softwarehealthcarelogisticsfinancial servicesreal estateconsumer and professional services
Notable public victims

Wolfram Research (leak-site listing, Sep 2026), Lightcast (leak-site listing, Sep 2026), RelyComply AML Platform (leak-site listing, Sep 2026), eAssist Dental Solutions (leak-site listing, Sep 2026), Precision Vehicle Logistics (leak-site listing, Sep 2026), Mission Pet Health (leak-site listing, Sep 2026), Pride Purple Group (reported Dire Wolf victim, 2025)

Estimated earnings

No public figure.

Leak-site victims

VictimDiscoveredDetails
Bolt Nut Manufacturing · Aug 25, 2025
Dynacast · Aug 25, 2025
台灣東洋國際儀表股份有限公司 · Aug 25, 2025
Wine Works Australia · Aug 25, 2025
International Freight & Commerce · Aug 18, 2025
Avv Emilio Marco Casali · Aug 14, 2025
Immigration Advice Service · Aug 14, 2025
ksubsea-group · Aug 14, 2025
HCK Capital Group · Aug 5, 2025
Kingsford Development & LEADBUILD Construction Pte Ltd · Aug 5, 2025
MGI Singapore PAC · Jul 28, 2025
W.L. FOODS · Jul 28, 2025
Acarlar Ltd · Jul 28, 2025
Universidad Mayor · Jul 20, 2025Universidad Mayor (UM), acreditación institucional con la Middle States Commission on Higher Education de los EE.UU (MSCHE).
Anadolu Hastaneleri · Jul 20, 2025Anadolu Hospitals strives to become the preferred brand in the region with its experienced healthcare staff.
Pergamon Status Diş Ticaret A Ş · Jul 20, 2025Pergamon Status Diş Ticaret A Ş is a company that operates in the international trade industry.
Akribis Systems · Jul 20, 2025Akribis Systems is a global designer and manufacturer of direct drive motors, stages, positioning systems.
Doak Shirreff Lawyers · Jul 8, 2025Doak Shirreff Kelowna Lawyers is a full-service law firm situated in Kelowna, British Columbia.
UPG Enterprises · Jul 8, 2025UPG Enterprises is a privately held operator of industrial companies that focus on steel, lamination, rail products and metal-wares.
MITACHI (HK) COMPANY LIMITED · Jul 8, 2025Mitachi (Hk) Company Limited is headquartered in Hong Kong. Subsidiary of Japan's MITACHI CO., LTD.
INICIA · Jul 8, 2025Inicia Ltd specializes in providing a range of poultry-related products and services.
Faria Braga Advogados Associados · Jul 8, 2025Faria Braga Advogados Associados is a society of environmental and urban law, working with public bodies company based out of R Paraiba, 1323, 4° Andar, Savassi, Belo Horizonte, MG Brazil.
THAIRUNG GROUP · Jun 18, 2025Thairung Group is a leading group of companies in the automobile business.
GB Group · Jun 18, 2025GBGroup is in the process of developing innovative solutions for their clients.
K.M. Packaging Co., Ltd · Jun 10, 2025K.M. Packaging Public Company Limited is a company specializing in the production of food and beverage packaging.
Medifarma · Jun 10, 2025The leading pharmaceutical laboratory in Peru, present in eight countries and with more than 3,600 employees.
Health-Insights · Jun 10, 2025A worldwide leading, reliable, highest performance and most cost effective HCIT (HealthCare Information Technology) services provider.
YIEH UNITED STEEL CORP · Jun 4, 2025Yieh United Steel Corp is a company that operates in the Minerals & Mining industry
IoTechWorld · Jun 4, 2025IoTechWorld Avigation, India's largest drone manufacturer, aims to transform agriculture with advanced drones.
EPC Group · Jun 4, 2025The EPC Group is an internationally active engineering and plant construction company as well as a provider of innovative technologies.
Bin Faqeeh Real Estate · May 31, 2025Kingdom of Bahrain’s leading real estate investment company.
Legal Practice Board of Western Australia · May 31, 2025The Legal Practice Board is an independent statutory authority within the Western Australian public sector.
TDM Technical Services · May 31, 2025TDM Technical Services provides the best human resources available, on an as needed contract basis.
kiwi86 · May 27, 2025Provide "fair" and "professional": [Insurance Product Database] and related [Policy: Physical Examination and Management] system services
qualitas-pro · May 27, 2025Qualitas Commercialisti Associati is an association of Chartered Accountants able to offer consultancy and assistance in corporate, fiscal, contractual, pre-bankruptcy and bankruptcy matters.
SMV Thailand · May 27, 2025SMV Thailand has a strong expertise in the manufacture of fashion jewelry, which covers a wide range from Luxury Brands to mass distribution, through the watch and jewellery retailers.
Wilson International · May 27, 2025Wilson International is a global commodities trading company specializing in the supply chain for fertilizer and petrochemical manufacturing facilities.

In the newsAll →

No articles mention this group yet.

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .