Dire Wolf is a sophisticated human-operated ransomware group first documented in May 2025, written in Golang using Curve25519/ChaCha20 encryption, targeting manufacturing and technology sectors across 13+ countries with ransoms up to $500,000, operated by a tight core team rather than a broad affiliate program. Known victims: 71 1 ransom note(s) on file
Objectives
No AI analysis yet.
No techniques linked yet.
No tools linked yet.
direwolf: Fondo
Ransomware attack attributed to direwolf. | Sector: Financial Services | Website: fondo.com | Financial Software | Source: https://www.ransomware.live/id/Rm9uZG9AZGlyZXdvbGY=
Aug 10, 2026
TLP:CLEARdirewolf: BigSpark
Ransomware attack attributed to direwolf. | Country: AI | Sector: Not Found | Website: bigspark.ai | Business Services | Source: https://www.ransomware.live/id/QmlnU3BhcmtAZGlyZXdvbGY=
Aug 10, 2026
TLP:CLEARNo observed data linked yet.
No IOCs linked yet.
No references recorded yet.
0
Techniques
0
Tools
15
Campaigns
0
IOCs
0
Observed Data
0
Tactics