THREATOPS

THREAT OPS › Threat News › [direwolf] PTT Oil and Retail Business posted to leak site

[direwolf] PTT Oil and Retail Business posted to leak site

medransomware_livePublished 2026-09-02

Ransomware group: direwolf Victim: PTT Oil and Retail Business Victim website: pttor.com Sector: Energy & Utilities Country: TH Discovered: 2026-09-02T16:54:26.923730+00:00 Leak-site post: http://direwolfcdkv5whaz2spehizdg22jsuf5aeje4asmetpbt6ri4jnd4qd.onion/api/public/articles/119 Description: Chemicals Note: leak-site listings typically precede public disclosure.

Indicators of compromise

pttor.comdomain
http://direwolfcdkv5whaz2spehizdg22jsuf5aeje4asmetpbt6ri4jnd4qd.onion/api/public/articles/119url

Original source: http://direwolfcdkv5whaz2spehizdg22jsuf5aeje4asmetpbt6ri4jnd4qd.onion/api/public/articles/119