WereWolves
WereWolves is a ransomware group with a financial motive, tracked by Brandefense. It targets 10 sectors, including Technology and Manufacturing, in 8 countries, including the United States and France.
- Techniques
- 0
- Exploited CVEs
- No CVE data
- First seen
- Oct 1, 2022
- Last seen
- Jun 1, 2025
- Record updated
Who They Target.
Sectors · 10
Labelsclear-web-leak-sitedata-extortiondouble-extortionlockbit-builderransomwarerussian-speakingwerewolves
About WereWolves.
WereWolves is a Russian-speaking ransomware group that emerged in May 2023, using a modified LockBit 3 (Black) encryptor, operating an unusual public website that actively recruits new members and offers a bug-bounty program with rewards up to $1 million, with at least 26 victims across Russia, the US, and Europe.
Last updated Oct 1, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.