Direwolf
Ransomware Group Profile
Overview
Dire Wolf is a sophisticated human-operated ransomware group first documented in May 2025, written in Golang using Curve25519/ChaCha20 encryption, targeting manufacturing and technology sectors across 13+ countries with ransoms up to $500,000, operated by a tight core team rather than a broad affiliate program.
Dark Web Infrastructure (3)
direwolfcdkv5whaz2spehizdg22jsuf5aeje4asmetpbt6ri4jnd4qd.onion
direwolfgpyqohwxwoetsz7a6p72diu32c3wfysqdx4ei6bwft7zh3yd.onion
direwolf66s5zealav7azcyqeipiswecvvnapyuby3dek473kyqfucad.onion
Activity Timeline
First Seen2026
Last Seen2026
Leak Sites3
Quick Actions