THREAT OPS › Threat News › [direwolf] PayUp posted to leak site
[direwolf] PayUp posted to leak site
Ransomware group: direwolf Victim: PayUp Victim website: payup.com Sector: Financial Services Country: n/a Discovered: 2026-08-19T00:54:47.815772+00:00 Leak-site post: http://direwolfcdkv5whaz2spehizdg22jsuf5aeje4asmetpbt6ri4jnd4qd.onion/api/public/articles/95 Description: Financial Software Note: leak-site listings typically precede public disclosure.
Indicators of compromise
- payup.comdomain
- http://direwolfcdkv5whaz2spehizdg22jsuf5aeje4asmetpbt6ri4jnd4qd.onion/api/public/articles/95url