Watch Floor

Ransomware

direwolf

0mentions, 7 days

0mentions, 30 days

4victims posted, 30 days

nonelast mentioned

CVEs in recent coverage

No CVEs named alongside this actor in the last 90 days.

Recent victims

My Cloud Grocer
Nov 1, 2026
USClaims
Oct 29, 2026
GRUPO PETROIL
Oct 27, 2026
Interseguro
Oct 13, 2026

A leak-site post is the group's claim, not confirmed by the victim.

Recent activity

No posts or advisories have named this actor recently.

References

https://www.ransomlook.io/group/direwolf

From the MISP threat-actor galaxy, MITRE ATT&CK and RansomLook (CC BY 4.0). Activity is any post or advisory Watch Floor collected that names the actor or one of its aliases.