qilin
ransomware group · aka Qilin, Agenda, Water Galura (Microsoft designation) · Unknown; vendors believe the operation is Russian-speaking, though this is unconfirmed · active since Mid-2022 (initially tracked as Agenda; the Qilin branding emerged in 2023)
Victims · 7d
25▲11 vs prev. week
Victims · 30d
119active targets
Victims · 90d
360
All-time (tracked)
2.3Ksince 2022-10-08
Last post
09-17 23:46UTC
Estimated earnings
—public reporting
Profile · glm-5.3-flash · updated
Qilin is a ransomware-as-a-service and data-extortion group first observed in mid-2022 and initially tracked as Agenda, with the Qilin name appearing in 2023. It operates a double-extortion model, encrypting systems and publishing stolen data from non-paying victims, and targets organizations across a broad range of sectors and geographies, including critical infrastructure. Publicly reported incidents include optical manufacturer Hoya (2023), Toyota Financial Services (2023), Nissan's Australian dealer association via a third-party compromise (2023), US newspaper publisher Lee Enterprises (2025), and a 2023 supply-chain intrusion through a Yamaha motorcycle dealer affecting Philippine customers. The group has exploited vulnerable public-facing software such as Zimbra and Cisco IOS XE, and uses both Windows and Linux/ESXi encryptors. Vendor tracking consistently ranked Qilin among the most active ransomware brands through 2024-2025, and it remains active as of late 2025.
Tactics & tooling
- RaaS affiliate operation with double extortion; victim data posted to a leak site if no ransom is paid
- Initial access via stolen VPN/RDP credentials, frequently in environments lacking MFA, per incident reporting
- Exploitation of unpatched public-facing services, including Zimbra and Cisco IOS XE
- BYOVD technique using vulnerable drivers to disable or evade security tooling, per Sophos incident analysis
- Metasploit/Meterpreter stager (TinyMet) used for tool delivery and privilege escalation
- Go- and later Rust-based Windows encryptors, with separate Linux/ESXi builds used in some attacks
- Supply-chain access through compromised service providers, dealers, or third-party platforms
- Published affiliate rules and 'legal agreements' governing affiliate conduct, per 2024-2025 reporting
Targeted sectors
manufacturingautomotivefinancial servicesIT serviceslegalmedia and publishinghealthcareeducation
Notable public victims
Hoya Corporation (2023), Toyota Financial Services (2023), Nissan Dealer Association Australia (2023, via third-party compromise), Yamaha Motor Philippines customers (2023, via dealer supply-chain intrusion), Synoptek (2025), Lee Enterprises (2025), Philippine Ports Authority, Jouvet SAS, G&S Technologies, Colonial Hyundai
Estimated earnings
No public figure.
Leak-site victims2,257 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| InfraCom Group | · Oct 26, 2025 | InfraCom Group AB (publ) is a leading player in IT infrastructure, offering services like mobile and fixed telephony, cloud PBX, fiber internet, server hosting, and web platforms since 1999. The company serves approximately 20,000 clients, pr ... |
| South Alabama Regional Planning Commission | · Oct 26, 2025 | SARPC is a locally controlled and organized instrument of local government in Southwestern Alabama, serving Mobile, Baldwin, and Escambia counties, along with twenty-nine municipalities. The organization provides programs and services focused ... |
| Essential Cabinetry Group | · Oct 25, 2025 | Simpsonville, SC-based Essential Cabinetry is a manufacturer of custom, semi-custom and stock-plus kitchen and bathroom cabinetry that is sold primarily through the dealer channel. Through its three market-leading brands (Tedd Wood Fine Cabin ... |
| City of Sugar Land | · Oct 25, 2025 | Founded as a sugar plantation in the early mid-20th century and incorporated in 1959, Sugar Land is a city in the state of Texas, in the United States. The city is within the Houston, The Woodlands and Sugar Land metropolitan area and Fort Be ... |
| Zacho-Lind | · Oct 25, 2025 | Zacho-Lind A/S is a construction company based in Copenhagen with over 85 years of experience, specializing in infrastructure, concrete, and utility services. The company undertakes projects for both public and private clients, focusing on ar ... |
| Kaufman & Stigger | · Oct 25, 2025 | When you call Kaufman & Stigger, PLLC Injury Lawyers, you will talk to a team with decades of experience helping people injured after an accident. Our Louisville-based law firm is focused exclusively on providing counsel to injured clients th ... |
| Omrin | · Oct 25, 2025 | Omrin is a leading waste management company in the Netherlands, dedicated to creating a clean and sustainable world. They provide a range of services including waste collection for over 1.6 million residents and 10,000 businesses, as well as ... |
| Doha British School | · Oct 24, 2025 | Doha British School, Qatar - is one of the leading British international schools in Qatar, operating in the country since 1997. After 28 years, DBS has grown into a group of three outstanding campuses offering the English National Curriculum ... |
| ClearCare Periodontal & Implant Centre | · Oct 24, 2025 | The ClearCare Periodontal & Implant Centre was attacked on 13 of October 2025. At the time of the attack, critical data on customers and their employees was uploaded. The company was informed of the colossal data leak, but ignored demands to ... |
| Gericke AG | · Oct 23, 2025 | The Swiss Gericke Group has been designing and manufacturing equipment and systems for modern bulk material processes, as well as providing design and consultation services, for more than 125 years. Gericke bulk materials processing technolog ... |
| IREM companies | · Oct 23, 2025 | IREM companies, USA - is an international institute for real estate and asset managers, promoting management through education and information exchange. IREM conducts real estate management training courses, organizes national meetings of rea ... |
| Real Estate Specialists | · Oct 23, 2025 | Real Estate Specialists is dedicated to managing and maintaining rental properties in southeast Wisconsin, focusing on enhancing their performance since 1982. They offer a comprehensive range of property management services, catering to prope ... |
| Samera Health | · Oct 23, 2025 | Samera Health is a Third Party Administrator (TPA) that provides Health, Dental, and Vision benefits for employer groups. The company focuses on delivering innovative and cost-saving solutions while ensuring a positive customer experience thr ... |
| CHDFS | · Oct 23, 2025 | CHDFS Inc is dedicated to providing social services and support for individuals, families, and communities in need. They offer a range of programs including OPWDD, OMH, Early Intervention, and Health Home Care Management. Their mission focuse ... |
| NurseSpring | · Oct 23, 2025 | NurseSpring specializes in home health care, health care staffing, and nurse recruitment services. They prioritize compassion, dignity, and respect while delivering care, ensuring clients receive the right care at the right time. Their intend ... |
| Integral Networks | · Oct 23, 2025 | Integral Networks, Inc. is a leading IT services provider in Sacramento, specializing in responsive IT support tailored to the needs of legal firms and various other industries including construction, manufacturing, and finance. They offer a ... |
| Signet Armorlite, Inc. | · Oct 23, 2025 | Founded in 1947, Signet Armorlite, Inc., an optical company, designs and manufactures glass ophthalmic lenses and molds. It also distributes lenses worldwide and adhesive optical supply products in the United States. Signet Armorlite is headq ... |
| All Truck Transportation | · Oct 23, 2025 | All Truck Transportation Co., Inc. is an asset-based carrier offering local and regional truckload transportation solutions. We are headquartered in Chicago, Illinois with a vast network of terminals throughout the Midwest. We operate within ... |
| Grupo Promasa | · Oct 23, 2025 | Grupo Promasa is a company that operates in the Building Materials industry. It employs 250to499 people and has 10Mto25M of revenue. The company is headquartered in San Pedro Sula, Cortes, Honduras. The amount of downloaded data is unknown at ... |
| KHL Printing | · Oct 22, 2025 | KHL Printing, Singapore - one of the largest printing companies in Southeast Asia with the most comprehensive range of services. KHL Printing offers end-to-end solutions from conceptualization to delivery of print products and other platform ... |
| Magna Hospitality Group | · Oct 22, 2025 | Magna Hospitality Group, USA - a private equity firm dedicated to the investment, development and management of hotel properties. Magna employs more than 100 professionals specializing in all areas including investment, finance, legal, hotel ... |
| More Than Gourmet | · Oct 22, 2025 | More Than Gourmet, USA - is a food company based on classic French culinary traditions. MTG products are used in gourmet restaurants, resorts and sold in specialty gourmet food stores. Privately held since 1993, MTG has been financially soun ... |
| KIS Asset Evaluation | · Oct 22, 2025 | KIS Asset Evaluation, Korea - company operating in the financial market, strives to become the No. 1 company in the field of financial asset valuation. KIS Pricing offers a wide range of services and solutions required in the financial indust ... |
| Applied Technology Resources | · Oct 22, 2025 | Applied Technology Resources, Inc. is an international leader in Title Search Exams throughout the United States, offering unmatched accuracy and turnaround times through their proprietary information system. The company specializes in custom ... |
| Northern Light Technologies | · Oct 22, 2025 | Founded in 1984, Northern Light Technologies (NLT) designs and manufactures underground lighting and networking solutions for the mining and tunnelling industries with manufacturing/assembly locations in Canada, Australia and Chile. Northern ... |
| Tri City Foods | · Oct 22, 2025 | Founded in 2003 and headquartered in Downers Grove, Illinois, Tri City Foods is a franchisee of the Burger King restaurant chain. The company owns and operates locations in and around Chicago, Illinois. A group of companies was attacked: lmc ... |
| Khatami Law | · Oct 19, 2025 | Hoss Law is a law firm specializing in personal injury and family law services, dedicated to helping clients in Sacramento and surrounding areas. They focus on maximizing compensation for accident victims and offer a no-win, no-fee guarantee, ... |
| SANgel | · Oct 19, 2025 | SANgel est une entreprise gabonaise de production et de distribution alimentaire basée à Libreville, dans la province de l'Estuaire. Fondée en 1994, l'entreprise est spécialisée dans les produits surgelés, qu'elle importe, transforme et ... |
| Kudela & Weinheimer | · Oct 19, 2025 | KW Landscape Architects is a landscape architecture firm that specializes in creating exceptional built environments by balancing innovation with functionality. With over 30 years of experience, they offer services across various markets incl ... |
| Distribuciones Camba | · Oct 19, 2025 | Distribuciones Camba is a wholesale distributor of snacks and candies throughout Galicia. They offer a wide range of products including beverages, chocolates, gummies, and toys, catering primarily to the hospitality sector. Their distribution ... |
| Klima-Therm | · Oct 19, 2025 | The Company provides innovative air-conditioning, ventilation, cooling and heating solutions and is rapidly growing its business in the Renewable Energy Sources (RES) segment. The flagship brands distributed by Klima-Therm include: Fujitsu, K ... |
| BARCO Rent-A-Truck | · Oct 19, 2025 | Barco Rent-A-Truck is a leading provider of corporate 4x4 pickup truck rentals in the United States, offering a comprehensive fleet of brand new trucks, including 1/2, 3/4, and 1-ton models. Their services cater to a wide range of clients, fr ... |
| Octomeca OY | · Oct 19, 2025 | Octomeca Oy specializes in load protection solutions for transportation and warehousing, offering a range of stretch film wrapping machines designed to meet demanding packaging challenges. Their products include various series of wrapping mac ... |
| Gas Generator Solutions | · Oct 19, 2025 | Gas Generator Solutions (GGS) is a privately owned, independent organization established to provide Lab Managers with single point of contact for the Servicing and Repair of ANY Laboratory Gas Generator within their facility, independent of b ... |
| Cellini Design Center | · Oct 19, 2025 | Cellini is a Singapore-based online furniture shop offering a wide selection of designer home furniture that embodies comfort, luxury, and quality. The company specializes in various furniture categories, including living room, dining room, a ... |
| Stowaway Storage | · Oct 19, 2025 | Opened in the fall of 1998, Stowaway Storage has long been part of the North Haven community. The business has always been family owned and operated since it's beginning. Owner Raymond V Iannucci started the company on land previously utilize ... |
| JA Jennings | · Oct 19, 2025 | Founded in 1917, J.A. Jennings is a mid-size full-service construction company which constructs private sector commercial interiors projects as well as full-scale building renovations and infrastructure programs throughout the New York City m ... |
| BIOPHARMEX, SA de CV | · Oct 19, 2025 | BIOPHARMEX specializes in transforming scientific innovations into health solutions, providing over 30 medical products in Mexico from 10 different countries. The company serves more than 2,000 physicians who use and prescribe their products ... |
| Stephenson's Rental Services | · Oct 19, 2025 | Stephenson's Rental Services is a Canadian construction equipment and tool rental company that has been operating for over 70 years. The company provides a wide range of rentals, including construction equipment, scaffolding, and small tools, ... |
| London Women's Clinic | · Oct 19, 2025 | London Women's Clinic is a leading fertility clinic established in 1985, offering a wide range of fertility treatments and services across fourteen locations in the UK. Their offerings include IVF, ICSI, IUI, egg donation, and surrogacy, cate ... |
| Scales Sales & Service | · Oct 19, 2025 | Scales Sales & Service LLC was originally founded in 2004 in Omaha, Nebraska. A full-service scale company with locations in Greeley, CO, Colorado Springs, CO, Denver, CO, Omaha, NE, Kearney, NE, Scottsbluff, NE and Atlantic, IA, in addition ... |
| Laloma | · Oct 19, 2025 | La Loma Tamales is a Mexican restaurant chain in the Minneapolis-St. Paul area known for its traditional, handmade tamales made from fresh ingredients, including a unique process of cooking and grinding their own corn. They offer both savory ... |
| The Blood and Marrow Transplant Group of Georgia | · Oct 19, 2025 | The Blood and Marrow Transplant Group of Georgia (BMTGA) specializes in providing advanced care for patients undergoing blood and marrow stem cell transplantation, acute leukemia treatment, and CAR T-cell immunotherapy. They are recognized fo ... |
| Platinum Wines & Spirits | · Oct 19, 2025 | Platinum is one of the leading wines and spirits distributors in Singapore, having been in the industry for over a decade. Being the appointed wholesaler for many major wines and spirits companies like Beam Suntory Asia, Bacardi-Martini Singa ... |
| Sports Medicine and Orthopaedics | · Oct 19, 2025 | Sports Medicine and Orthopedics is committed to providing excellent patient care and education to orthopedic patients across Rhode Island, Massachusetts, and Connecticut. Led by Dr. Jack Goldstein, a Fellowship Trained Orthopaedic specialist, ... |
| Winholt Equipment Group | · Oct 19, 2025 | Winholt Equipment Group, founded in 1946 and headquartered in Woodbury, New York, is a manufacturer of food service, food handling, and material handling equipment. As a multiple-facilities manufacturer, we have the resources to quickly reac ... |
| All Weather Architectural Aluminum | · Oct 19, 2025 | All Weather Architectural Aluminum specializes in custom windows and doors, providing innovative solutions for both residential and commercial projects. Their extensive range includes sliding, folding, and pivot designs, catering to the uniqu ... |
| Wassa, SRO | · Oct 19, 2025 | In 2012, we established a sheltered workshop and we provide more than 100 protected work positions and offer new and new jobs. We can offer so called facultative compensation to our customers and reduce the penalties given by the law for not ... |
| SIGN Fracture Care International | · Oct 19, 2025 | SIGN Fracture Care International is a humanitarian organization dedicated to creating equality in fracture care globally by building sustainable orthopedic capacity in developing countries. They provide education to surgeons and donate the ne ... |
| Indian Spring Country Club | · Oct 19, 2025 | Located in beautiful Boynton Beach, Florida, Indian Spring Country Club is a gated, private country club that has the total package ...championship golf, tennis, fitness, casual and formal dining. The Indian Spring Country Club experience is ... |
In the newsAll →
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .