THREAT OPS › Threat News › [direwolf] Fondo posted to leak site
[direwolf] Fondo posted to leak site
Ransomware group: direwolf Victim: Fondo Victim website: fondo.com Sector: Financial Services Country: n/a Discovered: 2026-08-10T18:56:13.350976+00:00 Leak-site post: http://direwolfcdkv5whaz2spehizdg22jsuf5aeje4asmetpbt6ri4jnd4qd.onion/api/public/articles/75 Description: Financial Software Note: leak-site listings typically precede public disclosure.
Indicators of compromise
- fondo.comdomain
- http://direwolfcdkv5whaz2spehizdg22jsuf5aeje4asmetpbt6ri4jnd4qd.onion/api/public/articles/75url