TOTAL ATTACKS
110
REPORTS APPEARED IN
1
GLOBAL RANK
#1
ATTACK SHARE
14.4%
Qilin operates as a highly sophisticated RaaS platform that has achieved explosive growth with 110 attacks this period, establishing itself as one of the most dominant ransomware operations we've tracked. The group employs double extortion tactics, leveraging T1190 to exploit public-facing applications like VPN gateways and unpatched web servers as their primary initial access vector, followed by T1003 credential dumping and T1021.001 RDP-based lateral movement to maximize network compromise. Their strategic targeting focuses on technology and manufacturing sectors across the US and Europe, with recent high-profile incidents including Romania's National Oil Pipeline Operator demonstrating their capability to breach critical infrastructure. The group's rapid ascension from relatively unknown to top-tier threat reflects their operationally mature approach to affiliate recruitment and their ability to consistently deliver high-value compromises that justify premium ransom demands.
3
upvotes
Qilin Ransomware Breach Confirmed at Romania’s National Oil Pipeline Operator
Romania’s national oil pipeline operator Conpet has confirmed that it suffered a data breach following a ransomware attack attributed to the Qilin group. While the company stressed that operational sy...
177
upvotes
Romania’s national oil pipeline operator, Conpet S.A., confirms that the Qilin ransomware gang stole company data in an attack last week.
43
upvotes
Qilin Ransomware Claims Data Theft from Church of Scientology
The Qilin ransomware group has listed the Church of Scientology on its dark web leak site, claiming responsibility for a breach and publishing 22 screenshots as proof of access. The group has not disc...
6
upvotes
Qilin Ransomware: Real Cases, IoCs, and Why Defenders Treat It as a Top-Tier Threat
Qilin ransomware has gained serious traction in the last couple of years, and it’s becoming one of the more concerning RaaS families for SOC teams. Unlike spray-and-pray variants, Qilin’s affiliates p...
142
upvotes
Japan's Asahi hack that halted beer production claimed by Qilin ransomware group
>Qilin, which operates a ransomware-as-a-service platform that allows users to carry out attacks in exchange for a percentage of extortion proceeds, posted 29 images to its website on Tuesday of wh...
2.0k
upvotes
my dad's company got attacked by Qilin Ransomware.
my dad's company recently got attacked by this ransomware. my dad's and his co-workers' salaries maybe will get cut off to pay the ransom. is there a way to fix this without paying the ransom? my dad...