THREAT OPS › Threat News › [direwolf] NorthStar posted to leak site
[direwolf] NorthStar posted to leak site
Ransomware group: direwolf Victim: NorthStar Victim website: cbsnorthstar.com Sector: Not Found Country: CA Discovered: 2026-08-21T02:30:11.201341+00:00 Leak-site post: http://direwolfcdkv5whaz2spehizdg22jsuf5aeje4asmetpbt6ri4jnd4qd.onion/api/public/articles/97 Description: Enterprise Resource Planning Note: leak-site listings typically precede public disclosure.
Indicators of compromise
- cbsnorthstar.comdomain
- http://direwolfcdkv5whaz2spehizdg22jsuf5aeje4asmetpbt6ri4jnd4qd.onion/api/public/articles/97url