qilin
First seen October 8, 2022Active2,414 claimed victims
The claims below are reproduced as posted by qilin on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Qilin ransomware was first observed in July of 2022. Qilin Ransomware is written in Golang and supports multiple encryption modes; all of which are controlled by the operator. Qilin actors practice double extortion – demanding payment for a decryptor, as well as for the non-release of stolen data.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| eyeDOCS Ottawa | May 5, 2023 | ransomware_live | — |
| Gropper & Nejat, PLLC | May 3, 2023 | ransomware_live | — |
| SIIX Corporation | April 30, 2023 | ransomware_live | — |
| Sippex | April 12, 2023 | ransomware_live | — |
| Attent Zorg en Behandeling | March 1, 2023 | ransomware_live | — |
| fsmsolicitors.co.uk | February 24, 2023 | ransomware_live | — |
| GIGATRON.RS | February 20, 2023 | ransomware_live | — |
| Emtelco | November 9, 2022 | ransomware_live | — |
| Lojas Torra | November 9, 2022 | ransomware_live | — |
| Contempo Card | November 9, 2022 | ransomware_live | — |
| Robert Bernard | November 9, 2022 | ransomware_live | — |
| Dialog Information Technology | November 6, 2022 | ransomware_live | — |
| Municipio de Chihuahua | October 26, 2022 | ransomware_live | — |
| scinopharm.com | October 8, 2022 | ransomware_live | — |
← NewerPage 25 of 25
Claim data from ransomware.live and RansomLook (CC BY 4.0).