// THREAT ACTOR
DIREWOLF_
ActiveDIREWOLF is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.
For Ransomnews editorial coverage of DIREWOLF — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.
Victims by year
- 2026 16
- 2025 59
Leak site mirrors
3 mirrors tracked, 2 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.
-
direwolfcdkv5whaz2spehizdg22jsuf5aeje4asmetpbt6ri4jnd4qd.onionDireWolf snapshot · 2026-08-06 21:17 -
direwolfgpyqohwxwoetsz7a6p72diu32c3wfysqdx4ei6bwft7zh3yd.onionFile Browser snapshot · 2026-04-09 07:00 -
direwolf66s5zealav7azcyqeipiswecvvnapyuby3dek473kyqfucad.onionDireWolf Negotiation System - Login snapshot · 2026-08-06 21:22
Recent victims
The 50 most recent victims claimed by DIREWOLF. Total in the index: 75.
| Date listed | Victim | Description |
|---|---|---|
| 2026-06-12 | Jewelex | |
| 2026-06-12 | Clínica Vida | |
| 2026-06-12 | Did Asia | |
| 2026-06-12 | Nueva Pescanova Group | |
| 2026-01-13 | Tepco-Group | |
| 2026-01-13 | Perdana Petroleum Berhad | |
| 2026-01-13 | Chemsain Konsultant Sdn Bhd | |
| 2026-01-09 | Bauerfeind | |
| 2026-01-09 | Mohammad Omar Bin Haider Holding Group | |
| 2026-01-04 | KwikLedgers | |
| 2026-01-04 | Laurenzano Logistics | |
| 2026-01-04 | Sunzen Biotech Berhad | |
| 2026-01-04 | Varimed Medikal | |
| 2026-01-04 | Hydrodiseño | |
| 2026-01-04 | Bina Darulaman Berhad | |
| 2026-01-04 | PernelMedia | |
| 2025-12-23 | Polaris Parks | |
| 2025-12-23 | Ranger Investigation Guard | |
| 2025-12-23 | Office of Public Sector Anti-Corruption Commission | |
| 2025-12-23 | Guan Chong Berhad | |
| 2025-12-23 | Sanyang Motor | |
| 2025-12-23 | Adnan Sundra & Low | |
| 2025-12-22 | K.M. Packaging | |
| 2025-12-22 | MITACHI | |
| 2025-12-22 | Kingsford Group | |
| 2025-12-22 | International Freight & Commerce | |
| 2025-12-22 | Transpedrosa | |
| 2025-12-22 | Clemar Assessoria e Logística em Comércio Internacional | |
| 2025-12-22 | Meinhardt Malaysia | |
| 2025-12-22 | Electricidad Panamericana | |
| 2025-11-13 | Coral | |
| 2025-11-13 | Hyundai Nishat Motor | |
| 2025-11-13 | YPC MALAYSIA | |
| 2025-10-14 | Speed Inter Transport | |
| 2025-10-14 | Miguel Veiga, Neiva Santos e Associados. | |
| 2025-09-07 | Purwana Group | |
| 2025-09-07 | Taiwan Flex Electronics | |
| 2025-08-25 | Aroeira Salles Advogados | |
| 2025-08-25 | Bolt Nut Manufacturing | |
| 2025-08-25 | Dynacast | |
| 2025-08-25 | 台灣東洋國際儀表股份有限公司 | |
| 2025-08-25 | Wine Works Australia | |
| 2025-08-18 | International Freight & Commerce | |
| 2025-08-14 | Avv Emilio Marco Casali | |
| 2025-08-14 | Immigration Advice Service | |
| 2025-08-14 | ksubsea-group | |
| 2025-08-05 | HCK Capital Group | |
| 2025-08-05 | Kingsford Development & LEADBUILD Construction Pte Ltd | |
| 2025-07-28 | MGI Singapore PAC | |
| 2025-07-28 | W.L. FOODS |