qilin
ransomware group · aka Qilin, Agenda, Water Galura (Microsoft designation) · Unknown; vendors believe the operation is Russian-speaking, though this is unconfirmed · active since Mid-2022 (initially tracked as Agenda; the Qilin branding emerged in 2023)
Victims · 7d
25▲11 vs prev. week
Victims · 30d
119active targets
Victims · 90d
360
All-time (tracked)
2.3Ksince 2022-10-08
Last post
09-17 23:46UTC
Estimated earnings
—public reporting
Profile · glm-5.3-flash · updated
Qilin is a ransomware-as-a-service and data-extortion group first observed in mid-2022 and initially tracked as Agenda, with the Qilin name appearing in 2023. It operates a double-extortion model, encrypting systems and publishing stolen data from non-paying victims, and targets organizations across a broad range of sectors and geographies, including critical infrastructure. Publicly reported incidents include optical manufacturer Hoya (2023), Toyota Financial Services (2023), Nissan's Australian dealer association via a third-party compromise (2023), US newspaper publisher Lee Enterprises (2025), and a 2023 supply-chain intrusion through a Yamaha motorcycle dealer affecting Philippine customers. The group has exploited vulnerable public-facing software such as Zimbra and Cisco IOS XE, and uses both Windows and Linux/ESXi encryptors. Vendor tracking consistently ranked Qilin among the most active ransomware brands through 2024-2025, and it remains active as of late 2025.
Tactics & tooling
- RaaS affiliate operation with double extortion; victim data posted to a leak site if no ransom is paid
- Initial access via stolen VPN/RDP credentials, frequently in environments lacking MFA, per incident reporting
- Exploitation of unpatched public-facing services, including Zimbra and Cisco IOS XE
- BYOVD technique using vulnerable drivers to disable or evade security tooling, per Sophos incident analysis
- Metasploit/Meterpreter stager (TinyMet) used for tool delivery and privilege escalation
- Go- and later Rust-based Windows encryptors, with separate Linux/ESXi builds used in some attacks
- Supply-chain access through compromised service providers, dealers, or third-party platforms
- Published affiliate rules and 'legal agreements' governing affiliate conduct, per 2024-2025 reporting
Targeted sectors
manufacturingautomotivefinancial servicesIT serviceslegalmedia and publishinghealthcareeducation
Notable public victims
Hoya Corporation (2023), Toyota Financial Services (2023), Nissan Dealer Association Australia (2023, via third-party compromise), Yamaha Motor Philippines customers (2023, via dealer supply-chain intrusion), Synoptek (2025), Lee Enterprises (2025), Philippine Ports Authority, Jouvet SAS, G&S Technologies, Colonial Hyundai
Estimated earnings
No public figure.
Leak-site victims2,257 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| Grande Prairie Public Library | · Oct 19, 2025 | The Grande Prairie Public Library District is located at 3479 West 183rd Street, in Hazel Crest, Illinois. We serve the communities of Hazel Crest and Country Club Hills. We provide service to all residents living within our district boundari ... |
| Long Island Weight Loss Institute | · Oct 19, 2025 | Long Island Weight Loss Institute is a medical weight loss clinic that offers physician-supervised weight loss programs designed to treat the whole person. The clinic provides individualized support tailored to each patient's unique needs wit ... |
| pandarose.ca | · Oct 16, 2025 | A full range of technology consulting services—from infrastructure and specialized software to digital strategy and support. 1.This is a Non-Disclosure Agreement (NDA) between Fuels Inc. (the client) and Panda Rose Consulting Studios Inc. ... |
| montship.ca | · Oct 16, 2025 | Montship is Canada's largest shipping agency, providing comprehensive agency services for liner vessels and ports across the country. 1.The document is an internal financial report of Trealship Services Inc. (TSI), prepared by the Allied Mar ... |
| dalton.com | · Oct 16, 2025 | Founded in 1986, Dalton Pharma Services is a contract pharmaceutical company providing a full range of development and manufacturing services to pharmaceutical and research companies worldwide. 1.The document is a bank statement from MUFG Ba ... |
| bmcinnovation.com | · Oct 16, 2025 | BMC Strategic Innovation is a company specializing in strategic marketing that collaborates with partners to develop unique solutions to complex problems. They use a modular approach to tailor their services to individual client needs, drawin ... |
| gslong.com | · Oct 16, 2025 | GS Long provides specialized services in plant nutrition, plant protection, and field consulting for the agricultural industry. The company specializes in developing customized solutions to increase crop yields and safety. Committed to buil ... |
| coppage.net | · Oct 16, 2025 | At Coppage Construction, we design and build homes. 1.The document is a statement of income for Coppage Construction Company, Inc. for the period ending April 30, 2025. 2.The document is a report entitled “Work in Process” by Coppage Co ... |
| arizonafireplaces.com | · Oct 16, 2025 | Arizona Fireplaces offers its customers top-notch quality and service for fireplaces and accessories from leading global brands. 1.Arizona Department of Revenue — Contractor’s Certificate (Form 5005) “Contractor's Certificate for Prime ... |
| arpis.com | · Oct 16, 2025 | For fifty years, Arpi's has maintained this traditional approach to providing the highest quality service to our Calgary customers in the heating and cooling industry.Arpis Industries is proud to be recognized for its services and commitment ... |
| pcdpackaging.com | · Oct 16, 2025 | Development of customized industrial packaging. Single-use racks, export packaging, packaging for power units, specialized packaging, packaging for sea containers. 1.The document is an official bank statement from PCD Packaging de México S. ... |
| Beta Dyne | · Oct 16, 2025 | Beta Dyne, USA - develops and manufactures electrical equipment for the industrial plants, communications и medical. With over 20 years in the power industry, Beta Dyne, Inc. has developed a wide range of unique and high performance power pr ... |
| Middlesex Appraisal Associates | · Oct 16, 2025 | Middlesex Appraisal Associates, USA - provides appraisal services in Eastern Massachusetts in Middlesex, Essex, Suffolk, Norfolk, Worcester, and Plymouth counties. Founded in 1992, the company provides appraisal and consulting services utiliz ... |
| Sprague & Jackson | · Oct 16, 2025 | Sprague & Jackson, USA - Sprague & Jackson is a tax services firm that offers a range of client services including secure document submission and payment options. They provide personalized assistance through scheduled meetings to help clients ... |
| Bengal Industries | · Oct 16, 2025 | Bengal Industries, USA - founded in 1995, is a specialty carrier serving the continental United States and Canada. The company is experienced in turnkey projects involving heavy lifting and transportation services. If the load is large, heav ... |
| Agencia Tributaria | · Oct 15, 2025 | The Spanish Tax Administration Agency (Agencia Tributaria) - is the revenue service of the Kingdom of Spain. The agency is responsible for the effective application of the national tax and customs systems and for those resources of other Publ ... |
| Richmond Behavioral Health Authority | · Oct 15, 2025 | Richmond Behavioral Health Authority (RBHA) is a statewide organization dedicated to providing comprehensive mental health, mental retardation, substance abuse and prevention services to the residents of the City of Richmond. The organization ... |
| Rasi Laboratories | · Oct 15, 2025 | Rasi Laboratories, USA - a manufacturer and developer of nutraceuticals, specializing in dietary supplements like capsules, tablets, probiotics, and functional foods. Their facility in Cranbury, New Jersey, spans 198,500 square feet and is ... |
| Asahi Group Holdings | · Oct 15, 2025 | Asahi Group Holdings, founded in 1889 and headquartered in Tokyo, Japan, is a global food and beverage manufacturer specializing in both alcoholic and non-alcoholic beverages as well as snack products. The company operates across multiple int ... |
| Commune De Saint Claude | · Oct 15, 2025 | The Mairie de Saint-Claude provides a range of municipal services to the residents of Saint-Claude, a town located in Guadeloupe. Their offerings include administrative services, community support, and urban planning initiatives aimed at enha ... |
| LEYHAUSEN Research | · Oct 15, 2025 | Leyhausen Research GmbH is a leading provider of global field services since 1996, headquartered in Leverkusen, Germany. The company operates state-of-the-art facilities and call centers across Europe, the Middle East, India, and Africa, offe ... |
| Centurion Family Office Services LLC | · Oct 15, 2025 | Centurion originated as an idea to bring the high-value, high-impact services, traditionally reserved for only the wealthiest of individuals, to a broader network of families and entrepreneurs. Our Family Office Services address the needs of ... |
| Turnkey Africa | · Oct 15, 2025 | Turnkey Africa is a leading provider of technology solutions for the insurance industry across Africa, specializing in modernizing operations for traditional digital insurers, bancassurers, and pension administrators. They offer a comprehensi ... |
| Superior Linen Service | · Oct 15, 2025 | The Superior Linen Supply Company is designed to serve as an extension of our customers' business. By providing timely delivery of quality merchandise, outstanding service and affordable prices for over a century, customers have come to know ... |
| Buanderie Blanchelle | · Oct 15, 2025 | Buanderie Blanchelle specializes in the provision and maintenance of hospital textile products, offering a comprehensive turnkey service that includes product supply, post-use recovery, and distribution at a single per-kilogram rate. They pro ... |
| Pangea | · Oct 15, 2025 | PANGEA The Travel Store is a boutique travel agency that designs bespoke, full-service trips tailored to individual tastes. It blends an online platform with physical flagship stores so customers can get face-to-face consultations as well as ... |
| Victory Christian Center | · Oct 15, 2025 | Victory Church is a community-focused church located in Tulsa, OK, dedicated to fostering a space where individuals can love God and love people. The church offers a variety of ministries, including programs for children, youth, and young adu ... |
| Bay West | · Oct 15, 2025 | Bay West LLC provides environmental consulting and remediation services for government and commercial enterprises. The company offers services in the areas of industrial storm water permitting and consulting; brownfield site assessment, clean ... |
| Florida Marking Products | · Oct 15, 2025 | The Kennedy Group, an Inovar company, specializes in providing innovative labeling and packaging solutions that enhance brand visibility. They offer a wide range of high-performance products, including pressure-sensitive labels, warehouse loc ... |
| TF LE TOIT FOREZIEN | · Oct 15, 2025 | Real estate - build and manage, possibly acquire and develop for the benefit of its members with a view to accessing property through rental with promise of allocation as defined in articles 15 and following of these statutes, collective and ... |
| Wheale Law Firm | · Oct 15, 2025 | It's Wheale Law Firm's vision that justice is achieved, tailored to each client's case. Most injury lawyers define success in one way: money. Not surprisingly, these attorneys also treat each case and each client the same. You deserve mor ... |
| ville-elne | · Oct 15, 2025 | Elne is a commune in the Pyrénées-Orientales department in southern France. It lies in the former province of Roussillon, of which it was the first capital, being later replaced by Perpignan. Its inhabitants are still called Illibériens i ... |
| Rihatec Systemlösungen | · Oct 15, 2025 | Rihatec specializes in the construction of control cabinets and automation solutions for machines and systems. Based in Munich, the company serves clients in the DACH region with a range of products, including standard and customizable contro ... |
| Executive Cabinetry | · Oct 15, 2025 | Located in Simpsonville, South Carolina, Executive Cabinetry is an industry leader in semi-custom and custom cabinetry. The Executive Cabinetry facility encompasses 226,000 square feet of vertically integrated manufacturing space. Simply stat ... |
| Alu Perpignan | · Oct 15, 2025 | ALU Perpignan specializes in PVC and aluminum joinery for individuals and professionals, working on both residential and commercial projects. Drawing on its expertise and know-how, the company offers a wide range of products, including window ... |
| Home/ Schramm Udo Dipl Kfm Steuerberater | · Oct 15, 2025 | The Marcus Schramm Law Firm offers competent legal advice and an experienced team. We specialize in various areas of law and place the highest priority on quality and professionalism. The amount of downloaded data is unknown at the moment. I ... |
| Roger RENARD Entreprise | · Oct 15, 2025 | A family business founded in 1951 in Amélie-les-Bains (66) by Roger RENARD, we specialize in air conditioning, heating, air handling, smoke extraction, plumbing, water treatment, and thermal process installations. We operate nationwide, bot ... |
| Hunter Construction Group | · Oct 15, 2025 | With a relentless drive to exceed excellence, Jason and West Hunter III, have grown Hunter Construction Group exponentially from a small landscaping company to one of the most respected contractors in the industry. As an unlimited licensed ge ... |
| Urban Linker | · Oct 15, 2025 | Urban Linker is a recruitment agency that specializes in sourcing and placing digital and tech professionals. Founded over eight years ago, the company has a strong presence in France with offices in Paris, Lyon, Toulouse, and Bordeaux, and i ... |
| Alqueria | · Oct 15, 2025 | Productos Naturales de la Sabana S.A.S., doing business as Alquería, is a Colombian company that produces food, especially dairy products and beverages. Founded between 1958 and 1959, it currently has 7 processing plants and 21 distribution ... |
| SICE | · Oct 15, 2025 | SICE is a leading multinational company in technology integration for public infrastructure management. With over 100 years of history, it has become an international benchmark in the areas of ITS, tunnels, transportation, mobility and smart ... |
| Landmark Management | · Oct 15, 2025 | Landmark Management, Inc., manages 90 projects, consisting of 2,462 units across 5 states. Whether you are searching for an apartment to rent or a reliable company to manage your rural development property, let us put our thirty-six years of ... |
| SFG Technology Sdn Bhd | · Oct 15, 2025 | SFG Technology specializes in high voltage and medium voltage electrical power systems, solar renewable energy, and smart grid solutions. Their product offerings include electrical network management systems, power factor capacitors, and test ... |
| WebCut Converting | · Oct 15, 2025 | WebCut Converting, Inc. specializes in contract slitting, laminating, and sheeting services tailored for the printing, converting, medical, and industrial markets. They process a variety of substrates including films, foams, non-wovens, and p ... |
| Kecy Metal Technologies | · Oct 15, 2025 | Kecy Metal Technologies (formerly Kecy Corporation) was established in 1988 as a supplier of NVH components for Tier 1 Japanese transplants. Kecy has since doubled its capacity to 160,000 ft and consistently increased sales year over year. Ke ... |
| Volkswagen Group France | · Oct 15, 2025 | Volkswagen Group France, a subsidiary of Volkswagen AG, is a prominent player in the automotive industry committed to sustainable mobility. The company focuses on innovation and environmental responsibility through its six brands, addressing ... |
| Pro-Fab | · Oct 15, 2025 | Pro Fab, Inc. specializes in custom design and fabrication products and services primarily for cleanrooms and industries such as semiconductor manufacturing, medical pharmaceutical labs, and American defense. They offer a wide range of produc ... |
| New Jersey Property-Liability Insurance Guaranty Association | · Oct 15, 2025 | New Jersey Property-Liability Insurance Guaranty Association, USA - is committed to excellence in providing outstanding claims service to claimants and policyholders in accordance with the Association's statutory responsibilities on behalf of ... |
| All Truck Transportation Co., Inc. | · Oct 15, 2025 | All Truck Transportation Co., Inc. is an asset-based carrier offering local and regional truckload transportation solutions. We are headquartered in Chicago, Illinois with a vast network of terminals throughout the Midwest. We operate within ... |
| Charles River Properties | · Oct 15, 2025 | Charles River Properties, USA - a real estate brokerage based in Waltham, Massachusetts, that handles residential and commercial sales and rentals. The company works only with very large properties. In its portfolio you will not find real es ... |
In the newsAll →
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .