Dire Wolf is a sophisticated human-operated ransomware group first documented in May 2025, written in Golang using Curve25519/ChaCha20 encryption, targeting manufacturing and technology sectors across 13+ countries with ransoms up to $500,000, operated by a tight core team rather than a broad affiliate program.
This group has 135 victims. The victim list API is currently responding slowly for this dataset. Country, sector, and infostealer breakdowns are not available at this time. Basic stats (victim count, first/last seen) are shown above from a faster data source.
Don't let email issues hurt your business reputation.
Our cybersecurity team helps you fix SPF, DKIM, DMARC and protect your sender reputation. Get a free 30-minute consultation with a security expert.