{
  "slug": "direwolf",
  "group": "direwolf",
  "name": "direwolf",
  "note": null,
  "attck": [],
  "activity": {
    "postings": 67,
    "first": "2026-08-10",
    "last": "2026-11-06",
    "countries": {
      "US": 28,
      "GB": 4,
      "MX": 3,
      "PE": 1,
      "BR": 5,
      "MY": 1,
      "CO": 1,
      "SE": 4,
      "ZA": 1,
      "TH": 1,
      "ID": 1,
      "TR": 1,
      "CL": 1,
      "IT": 1,
      "CA": 1,
      "NL": 1,
      "??": 4,
      "AE": 1,
      "DK": 1,
      "AU": 1,
      "IN": 1,
      "AI": 1,
      "DE": 1,
      "ES": 1,
      "PH": 1
    },
    "sectors": {
      "technology": 16,
      "finance": 8,
      "consumer": 2,
      "energy": 2,
      "insurance": 2,
      "transportation": 4,
      "services": 6,
      "unknown": 8,
      "education": 4,
      "manufacturing": 3,
      "healthcare": 14
    },
    "recent": [
      {
        "date": "2026-11-06",
        "name": "Algonomy",
        "country": "US",
        "sectors": [
          "technology"
        ],
        "url": "https://www.ransomware.live/id/QWxnb25vbXlAZGlyZXdvbGY"
      },
      {
        "date": "2026-11-03",
        "name": "USClaims",
        "country": "US",
        "sectors": [
          "finance"
        ],
        "url": "https://www.ransomware.live/id/VVNDbGFpbXNAZGlyZXdvbGY"
      },
      {
        "date": "2026-11-01",
        "name": "My Cloud Grocer",
        "country": "GB",
        "sectors": [
          "consumer"
        ],
        "url": "https://www.ransomware.live/id/TXkgQ2xvdWQgR3JvY2VyQGRpcmV3b2xm"
      },
      {
        "date": "2026-10-27",
        "name": "GRUPO PETROIL",
        "country": "MX",
        "sectors": [
          "energy"
        ],
        "url": "https://www.ransomware.live/id/R1JVUE8gUEVUUk9JTEBkaXJld29sZg"
      },
      {
        "date": "2026-10-13",
        "name": "Interseguro",
        "country": "PE",
        "sectors": [
          "finance",
          "insurance"
        ],
        "url": "https://www.ransomware.live/id/SW50ZXJzZWd1cm9AZGlyZXdvbGY"
      },
      {
        "date": "2026-10-04",
        "name": "Softruck",
        "country": "BR",
        "sectors": [
          "technology"
        ],
        "url": "https://www.ransomware.live/id/U29mdHJ1Y2tAZGlyZXdvbGY"
      },
      {
        "date": "2026-10-04",
        "name": "Softruck",
        "country": "BR",
        "sectors": [
          "technology"
        ],
        "url": "https://www.ransomware.live/id/U29mdHJ1Y2tAZGlyZXdvbGY="
      },
      {
        "date": "2026-09-11",
        "name": "Port of Tanjung Pelepas",
        "country": "MY",
        "sectors": [
          "transportation"
        ],
        "url": "https://www.ransomware.live/id/UG9ydCBvZiBUYW5qdW5nIFBlbGVwYXNAZGlyZXdvbGY="
      },
      {
        "date": "2026-09-09",
        "name": "RelyComply AML Platform",
        "country": "GB",
        "sectors": [
          "finance"
        ],
        "url": "https://www.ransomware.live/id/UmVseUNvbXBseSBBTUwgUGxhdGZvcm1AZGlyZXdvbGY="
      },
      {
        "date": "2026-09-08",
        "name": "Sales Boomerang",
        "country": "US",
        "sectors": [
          "services"
        ],
        "url": "https://www.ransomware.live/id/U2FsZXMgQm9vbWVyYW5nQGRpcmV3b2xm"
      },
      {
        "date": "2026-09-08",
        "name": "EMS1R",
        "country": "US",
        "sectors": [
          "unknown"
        ],
        "url": "https://www.ransomware.live/id/RU1TMVJAZGlyZXdvbGY="
      },
      {
        "date": "2026-09-07",
        "name": "Precision Vehicle Logistics",
        "country": "US",
        "sectors": [
          "transportation"
        ],
        "url": "https://www.ransomware.live/id/UHJlY2lzaW9uIFZlaGljbGUgTG9naXN0aWNzQGRpcmV3b2xm"
      }
    ]
  },
  "convergences": [
    {
      "name": "Photon Health",
      "flagged": "2026-10-22",
      "classes": [
        "leak",
        "litigation",
        "notice"
      ],
      "curated": false,
      "hand_picked": false
    }
  ],
  "reports": [],
  "techniques": [],
  "cves": [],
  "indicators": {
    "list": [],
    "withheld": 0
  },
  "rules": [],
  "coverage": {
    "techniques": 0,
    "defendable": 0,
    "covered": 0,
    "uncovered": []
  }
}