EudorIACyber Intelligence
Operational monitoring Newsletter IT EN
← Threat actor database
Threat actor profile

direwolf

Defensive profile aggregated solely from the catalogued evidence. Associations reflect the sources and are not independent EudorIA attribution.

Evidence status
observed
First observation
Not available
Last observation
14/09/2026
Correlated signals
20
Observed picture

What the sources describe

RansomLook indicizza una pubblicazione attribuita a direwolf: Little Otter. La segnalazione è OSINT e non costituisce conferma indipendente dell'incidente.

RansomLook indicizza una pubblicazione attribuita a direwolf: Hazel Health. La segnalazione è OSINT e non costituisce conferma indipendente dell'incidente.

RansomLook indicizza una pubblicazione attribuita a direwolf: Port of Tanjung Pelepas. La segnalazione è OSINT e non costituisce conferma indipendente dell'incidente.

AliasesNot catalogued
RansomwareNot documented
MalwareNot documented
Named targetsMY, GB, US, CO, SE, ZA, TH, BR, ID, TR, CL, IT, CA, MX, NL, AE, DK, AU, IN, AI, DE, ES, PH
Modus operandi

Observed methods and techniques

0 structured pieces of evidence
Profile to enrich

The available sources do not yet describe sufficiently structured methods.

Risk reduction

How to prepare the defence

Controls linked to the evidence

The sources contain no explicit defensive guidance. The services below are deterministically correlated to the catalogued TTPs, not generated as claims about the actor.

EudorIA

Security Assessment

Verifica esposizione, configurazioni e priorita di remediation prima che una tecnica osservata diventi un incidente.

Approfondisci il servizio →
EudorIA

SOC as a Service

Monitora le evidenze, correla gli indicatori e coordina triage, escalation e risposta agli incidenti.

Approfondisci il servizio →

The measures listed reduce likelihood and impact but do not guarantee the absolute prevention of an attack.

Tor intelligence

Catalogued onion sources

0

No onion source associated with this group.

Evidence trail

Linked observations

Last 20
DateSignalTypeConfidence
14/09/2026RansomLook: direwolf - Little Otterransomwareunverified_osint_claim
14/09/2026RansomLook: direwolf - Hazel Healthransomwareunverified_osint_claim
12/09/2026RansomLook: direwolf - Port of Tanjung Pelepasransomwareunverified_osint_claim
11/09/2026Segnalazione ransomware: Port of Tanjung Pelepasransomwareunverified_osint_claim
11/09/2026Segnalazione ransomware: Port of Tanjung Pelepasransomwareunverified_osint_claim
09/09/2026RansomLook: direwolf - RelyComply AML Platformransomwareunverified_osint_claim
09/09/2026Segnalazione ransomware: RelyComply AML Platformransomwareunverified_osint_claim
09/09/2026RansomLook: direwolf - Sales Boomerangransomwareunverified_osint_claim
08/09/2026RansomLook: direwolf - EMS1Rransomwareunverified_osint_claim
08/09/2026Segnalazione ransomware: Sales Boomerangransomwareunverified_osint_claim
08/09/2026Segnalazione ransomware: EMS1Rransomwareunverified_osint_claim
07/09/2026RansomLook: direwolf - TrainMeransomwareunverified_osint_claim
07/09/2026RansomLook: direwolf - Precision Vehicle Logisticsransomwareunverified_osint_claim
07/09/2026Segnalazione ransomware: Precision Vehicle Logisticsransomwareunverified_osint_claim
07/09/2026RansomLook: direwolf - Lightcastransomwareunverified_osint_claim
07/09/2026Segnalazione ransomware: TrainMeransomwareunverified_osint_claim
07/09/2026RansomLook: direwolf - Semper Laserransomwareunverified_osint_claim
07/09/2026Segnalazione ransomware: Lightcastransomwareunverified_osint_claim
07/09/2026Segnalazione ransomware: Semper Laserransomwareunverified_osint_claim
06/09/2026RansomLook: direwolf - eAssist Dental Solutionsransomwareunverified_osint_claim