Watch Floor
Ransomware

qilin

0mentions, 7 days
0mentions, 30 days
114victims posted, 30 days
nonelast mentioned

CVEs in recent coverage

No CVEs named alongside this actor in the last 90 days.

Recent victims

Most hit: Financial Services (11), Professional Services (10), Manufacturing (9), Construction & Real Estate (8), Technology (6), Education (5), Energy & Utilities (4), Government (4)

  • Rotstein & Shiffman
    Professional Services · Nov 6, 2026
  • Insurance Audit Services
    Financial Services · Nov 5, 2026
  • Calvary Christian College
    Education · Nov 5, 2026
  • Arthur Chapman Kettering Smetak Pikala PA
    Professional Services · Nov 3, 2026
  • Isapre Consalud
    Financial Services · Nov 2, 2026
  • Astino Berhad
    Construction & Real Estate · Nov 2, 2026
  • fzmb GmbH, Forschungszentrum für Medizintechnik und Biotechnologie
    Healthcare · Nov 1, 2026
  • Global Holding
    Transportation & Logistics · Nov 1, 2026
  • Shibata Co., Ltd.
    Technology · Nov 1, 2026
  • BKV Vasúti Jármjavító Kft
    Manufacturing · Nov 1, 2026
  • Meshbesher & Spence
    Professional Services · Nov 1, 2026
  • Forum
    Nov 1, 2026
  • CMD Naturkosmetik
    Nov 1, 2026
  • Select Community Management
    Construction & Real Estate · Nov 1, 2026
  • qc-consult
    Nov 1, 2026
  • Danser
    Construction & Real Estate · Nov 1, 2026
  • Community Medical Center, Falls City Nebraska
    Oct 31, 2026
  • TRAUCO AG
    Construction & Real Estate · Oct 30, 2026
  • Honghwa International
    Technology · Oct 30, 2026
  • Richland Resources Corporation
    Energy & Utilities · Oct 30, 2026
  • Sistemas Visuales 360
    Energy & Utilities · Oct 30, 2026
  • Societe Ivoirienne De Telediffusion
    Media · Oct 30, 2026
  • Palletline
    Transportation & Logistics · Oct 30, 2026
  • Light Rail Manila
    Oct 30, 2026
  • Farmacia I
    Professional Services · Oct 30, 2026
  • Grupo Ciosa, SAPI de CV
    Oct 30, 2026
  • Innoe Asesores
    Oct 30, 2026
  • iFink
    Financial Services · Oct 30, 2026
  • Udima
    Education · Oct 29, 2026
  • W Interactive
    Technology · Oct 29, 2026

A leak-site post is the group's claim, not confirmed by the victim.

Recent activity

No posts or advisories have named this actor recently.

References

From the MISP threat-actor galaxy, MITRE ATT&CK and RansomLook (CC BY 4.0). Activity is any post or advisory Watch Floor collected that names the actor or one of its aliases.