werewolves
Activity analysis
HackerFeeds has tracked 26 victims claimed by werewolves since May 2023, most recently in March 2024 — ranking #151 of 332 groups (0.1% of all tracked ransomware victims). No new victims have been posted in the last 180 days; the most recent claim was in March 2024. Its most-targeted sector is Business Services (8 victims), followed by Financial Services (4). Russia accounts for 14 victims (67% of those with a known location); 5 victims did not disclose a location.
Victims per year
- 202324
- 20242
Top sectors
- Business Services8
- Financial Services4
- Technology3
- Hospitality and Tourism3
- Telecommunication2
- Manufacturing2
Top countries
Computed from victims claimed on the group's leak site as collected by HackerFeeds; claims are not independently verified. Monthly reports · Methodology
Group profile
WereWolves is a Russian-speaking ransomware group that emerged in May 2023, using a modified LockBit 3 (Black) encryptor, operating an unusual public website that actively recruits new members and offers a bug-bounty program with rewards up to $1 million, with at least 26 victims across Russia, the US, and Europe.
Recent victims
| Date | Website / victim | Sector | Country |
|---|---|---|---|
| 2024-03-04 |  vsexshop.ruvsexshop.ru | Professional Services | RU |
| 2024-02-14 |  davidsbridal.comdavidsbridal.com | Professional Services | US |
| 2023-12-22 |  solveindustrial.comsolveindustrial.com | Manufacturing | US |
| 2023-12-15 |  forabank.ruforabank.ru | Financial Services | RU |
| 2023-12-17 |  vasexperts.ruvasexperts.ru | Technology | RU |
| 2023-05-18 |  bigcenters.rsbigcenters.rs | Retail & E-Commerce | RS |
| 2023-05-23 |  aek.mkaek.mk | Technology | MK |
| 2023-05-24 |  metalnet.nlmetalnet.nl | Manufacturing | NL |
| 2023-05-25 |  interfides.deinterfides.de | Professional Services | DE |
| 2023-06-17 |  lzaim38.rulzaim38.ru | Financial Services | RU |
| 2023-07-01 |  qb2b.ruqb2b.ru | Professional Services | RU |
| 2023-08-04 |  emprint.comemprint.com | Professional Services | |
| 2023-08-28 |  lapostemobile.frlapostemobile.fr | Technology | FR |
| 2023-09-13 |  acac.comacac.com | Healthcare | |
| 2023-09-14 |  krasnoyarsk.amakskrasnoyarsk.amaks | Hospitality | |
| 2023-09-22 |  avrora24.ruavrora24.ru | Retail & E-Commerce | RU |
| 2023-09-24 |  habarovsk.amakshabarovsk.amaks | Hospitality | |
| 2023-09-27 |  maritimebank.commaritimebank.com | Financial Services | |
| 2023-09-27 |  croc.rucroc.ru | Technology | RU |
| 2023-09-29 |  carmoney.rucarmoney.ru | Financial Services | RU |
| 2023-09-30 |  roomhotel-sochi.ruroomhotel-sochi.ru | Hospitality | RU |
| 2023-10-04 |  atol.ruatol.ru | Technology | RU |
| 2023-10-14 |  gaztranscom.rugaztranscom.ru | Energy & Utilities | RU |
| 2023-10-14 |  kailos.rukailos.ru | Professional Services | RU |
| 2023-11-02 |  promproektspb.rupromproektspb.ru | Professional Services | RU |
| 2023-11-02 |  auditexpertnn.ruauditexpertnn.ru | Professional Services | RU |