Japan

direwolf

Dire Wolf is a sophisticated human-operated ransomware group first documented in May 2025, written in Golang using Curve25519/ChaCha20 encryption, targeting manufacturing and technology sectors across 13+ countries with ransoms up to $500,000, operated by a tight core team rather than a broad affiliate program.

First seen 2025-04-17 · Last seen 2026-09-08 · 2 Japan claims

CVEs named by the source: CVE-2026-48027, CVE-2026-50751, CVE-2023-21529, CVE-2024-1708, CVE-2025-60710

Cached from ransomware.live. 2026-10-01 PT. Leak sites are not linked.