DireWolf 2026 activity
Ransomware group. 6 reports in 3 countries: 1 confirmed, 5 claimed or disputed. Latest 10 Sep 2026.
Malaysia
Thailand
Chile🎯 What sources say
- Malaysia: Listed Bina Darulaman, Sunzen Biotech, Perdana Petroleum and Chemsain Konsultant in January 2026 and Port of Tanjung Pelepas in September. ransomware.live Malaysia
🚨 Reports
| Organisation | Country | Date | Sector | Type | Actor | What happened | Sources |
|---|---|---|---|---|---|---|---|
 ✅ ConfirmedPort of Tanjung PelepasJohorFull story | Malaysia | 10 Sep 2026 | Transport | Ransomware | DireWolf | Confirmed. A cyber incident halted terminal operations overnight; systems were isolated and restored. Claimed. Direwolf listed the port on its leak site and claims ransomware and data theft. | The Loadstar · ransomware.live✓ 7 Nov |
 ⚠️ ClaimedPTT Oil and Retail Business (OR) | Thailand | 2 Sep 2026 | Energy | Ransomware | DireWolf | Claimed. Listed on Dire Wolf's leak site with an extortion notice. | ransomware.live✓ 7 Nov |
 ⚠️ ClaimedHospital Clínico Universidad de Chile | Chile | 30 Aug 2026 | Health | Ransomware | DireWolf | Claimed. DireWolf listed the university hospital on its leak site. | ransomware.live✓ 7 Nov |
 ⚠️ ClaimedPerdana Petroleum | Malaysia | 13 Jan 2026 | Energy | Ransomware | DireWolf | Claimed. DireWolf listed Perdana Petroleum Berhad on its leak site. | ransomware.live✓ 7 Nov |
 ⚠️ ClaimedSunzen Biotech | Malaysia | 4 Jan 2026 | Health | Ransomware | DireWolf | Claimed. DireWolf listed Sunzen Biotech Berhad on its leak site. | ransomware.live✓ 7 Nov |
 ⚠️ ClaimedBina DarulamanKedah | Malaysia | 4 Jan 2026 | Property | Ransomware | DireWolf | Claimed. DireWolf listed Bina Darulaman Berhad on its leak site. | ransomware.live✓ 7 Nov |
Leak-site listings are claims until the organisation or authorities confirm them. Methodology