direwolf ransomware group
Dire Wolf is a sophisticated human-operated ransomware group first documented in May 2025, written in Golang using Curve25519/ChaCha20 encryption, targeting manufacturing and technology sectors across 13+ countries with ransoms up to $500,000, operated by a tight core team rather than a broad affiliate program.
- Claims in 7 days
- 1
- Claims in 30 days
- 4
- Reported techniques
- 0
Listings on leak sites are claims by criminals. They are unverified and can be false. coldbraid shows counts here, not names.
Where it claims victims
| Country | Claims in 60 days |
|---|---|
| United States | 2 |
| United Kingdom | 1 |
| Mexico | 1 |
Sectors
| Sector | Claims in 60 days |
|---|---|
| Technology | 1 |
| Financial Services | 1 |
| Retail & E-Commerce | 1 |
| Energy & Utilities | 1 |