THREAT OPS › Threat News › [direwolf] TrainMe posted to leak site
[direwolf] TrainMe posted to leak site
Ransomware group: direwolf Victim: TrainMe Victim website: trainme.co Sector: Education Country: CO Discovered: 2026-09-07T16:56:02.087558+00:00 Leak-site post: http://direwolfcdkv5whaz2spehizdg22jsuf5aeje4asmetpbt6ri4jnd4qd.onion/api/public/articles/127 Description: Corporate Wellness Services Note: leak-site listings typically precede public disclosure.
Indicators of compromise
- trainme.codomain
- http://direwolfcdkv5whaz2spehizdg22jsuf5aeje4asmetpbt6ri4jnd4qd.onion/api/public/articles/127url