daily cyber × ai intelligence

← threat actors

threat actor

ZaWoo

also tracked as direwolf 1, qilin 1

1 story · 0 in the wild · August 31, 2026 – August 31, 2026

evidence: 1 claimed

sectors

  • healthcare 1 · Aug 31
  • media 1 · Aug 31
  • technology 1 · Aug 31

geography

  • austria 1 · Aug 31
  • chile 1 · Aug 31
  • turkey 1 · Aug 31
  • united kingdom 1 · Aug 31
  • united states 1 · Aug 31

what we reported, newest first, grouped by story

August 31, 2026

  • Leak-site activity: DireWolf listed Austrian publisher THQ Nordic (claimed 335 GB) alongside hospitals in Türkiye and Chile (DarkWebInformer, FalconFeeds). A new group, ZaWoo, appeared with its own onion portal and initial victims (DarkWebInformer). Qilin led August volume with roughly 160 posted victims by DarkFeed's count, with fresh listings including a UK consultancy and a US biotech (FalconFeeds). · Aug 31 · claimed · as direwolf, qilin · Threat Activity