Ransomware
qilin
0mentions, 7 days
0mentions, 30 days
114victims posted, 30 days
nonelast mentioned
CVEs in recent coverage
No CVEs named alongside this actor in the last 90 days.
Recent victims
Most hit: Financial Services (11), Professional Services (10), Manufacturing (9), Construction & Real Estate (8), Technology (6), Education (5), Energy & Utilities (4), Government (4)
- Rotstein & ShiffmanProfessional Services · Nov 6, 2026
- Insurance Audit ServicesFinancial Services · Nov 5, 2026
- Calvary Christian CollegeEducation · Nov 5, 2026
- Arthur Chapman Kettering Smetak Pikala PAProfessional Services · Nov 3, 2026
- Isapre ConsaludFinancial Services · Nov 2, 2026
- Astino BerhadConstruction & Real Estate · Nov 2, 2026
- fzmb GmbH, Forschungszentrum für Medizintechnik und BiotechnologieHealthcare · Nov 1, 2026
- Global HoldingTransportation & Logistics · Nov 1, 2026
- Shibata Co., Ltd.Technology · Nov 1, 2026
- BKV Vasúti Jármjavító KftManufacturing · Nov 1, 2026
- Meshbesher & SpenceProfessional Services · Nov 1, 2026
- ForumNov 1, 2026
- CMD NaturkosmetikNov 1, 2026
- Select Community ManagementConstruction & Real Estate · Nov 1, 2026
- qc-consultNov 1, 2026
- DanserConstruction & Real Estate · Nov 1, 2026
- Community Medical Center, Falls City NebraskaOct 31, 2026
- TRAUCO AGConstruction & Real Estate · Oct 30, 2026
- Honghwa InternationalTechnology · Oct 30, 2026
- Richland Resources CorporationEnergy & Utilities · Oct 30, 2026
- Sistemas Visuales 360Energy & Utilities · Oct 30, 2026
- Societe Ivoirienne De TelediffusionMedia · Oct 30, 2026
- PalletlineTransportation & Logistics · Oct 30, 2026
- Light Rail ManilaOct 30, 2026
- Farmacia IProfessional Services · Oct 30, 2026
- Grupo Ciosa, SAPI de CVOct 30, 2026
- Innoe AsesoresOct 30, 2026
- iFinkFinancial Services · Oct 30, 2026
- UdimaEducation · Oct 29, 2026
- W InteractiveTechnology · Oct 29, 2026
A leak-site post is the group's claim, not confirmed by the victim.
Recent activity
No posts or advisories have named this actor recently.
References
From the MISP threat-actor galaxy, MITRE ATT&CK and RansomLook (CC BY 4.0). Activity is any post or advisory Watch Floor collected that names the actor or one of its aliases.
