Skip to main content
Ransomware Group

Werewolves

WereWolves is a Russian-speaking ransomware group that emerged in May 2023, using a modified LockBit 3 (Black) encryptor, operating an unusual public website that actively recruits new members and offers a bug-bounty program with rewards up to $1 million, with at least 26 victims across Russia, the US, and Europe.

Known victims26

Threat level

MEDIUM

Get an alert if one of your domains is named on a ransomware leak site.

Monitor your domainsFree account · up to 5 monitored targets

Known infrastructure

The following Tor hidden services have been associated with this group:

  • Error 502
  • weerwolven.biz

These sites are malicious. Open them only from an isolated environment.

0

Check if you’re affected

Look up your domain to see whether it appears on Werewolves’s victim list.

Try it nowFree⌘K
Try

risk score · threat categories · sources · age · confidence — in one request