THREAT OPS › Threat News › [direwolf] TOTVS posted to leak site
[direwolf] TOTVS posted to leak site
Ransomware group: direwolf Victim: TOTVS Victim website: totvs.com Sector: Technology Country: BR Discovered: 2026-08-15T20:25:42.312616+00:00 Leak-site post: http://direwolfcdkv5whaz2spehizdg22jsuf5aeje4asmetpbt6ri4jnd4qd.onion/article/84 Description: Business Services Note: leak-site listings typically precede public disclosure.
Indicators of compromise
- totvs.comdomain
- http://direwolfcdkv5whaz2spehizdg22jsuf5aeje4asmetpbt6ri4jnd4qd.onion/article/84url