qilin
ransomware group · aka Qilin, Agenda, Water Galura (Microsoft designation) · Unknown; vendors believe the operation is Russian-speaking, though this is unconfirmed · active since Mid-2022 (initially tracked as Agenda; the Qilin branding emerged in 2023)
Victims · 7d
25▲11 vs prev. week
Victims · 30d
119active targets
Victims · 90d
360
All-time (tracked)
2.3Ksince 2022-10-08
Last post
09-17 23:46UTC
Estimated earnings
—public reporting
Profile · glm-5.3-flash · updated
Qilin is a ransomware-as-a-service and data-extortion group first observed in mid-2022 and initially tracked as Agenda, with the Qilin name appearing in 2023. It operates a double-extortion model, encrypting systems and publishing stolen data from non-paying victims, and targets organizations across a broad range of sectors and geographies, including critical infrastructure. Publicly reported incidents include optical manufacturer Hoya (2023), Toyota Financial Services (2023), Nissan's Australian dealer association via a third-party compromise (2023), US newspaper publisher Lee Enterprises (2025), and a 2023 supply-chain intrusion through a Yamaha motorcycle dealer affecting Philippine customers. The group has exploited vulnerable public-facing software such as Zimbra and Cisco IOS XE, and uses both Windows and Linux/ESXi encryptors. Vendor tracking consistently ranked Qilin among the most active ransomware brands through 2024-2025, and it remains active as of late 2025.
Tactics & tooling
- RaaS affiliate operation with double extortion; victim data posted to a leak site if no ransom is paid
- Initial access via stolen VPN/RDP credentials, frequently in environments lacking MFA, per incident reporting
- Exploitation of unpatched public-facing services, including Zimbra and Cisco IOS XE
- BYOVD technique using vulnerable drivers to disable or evade security tooling, per Sophos incident analysis
- Metasploit/Meterpreter stager (TinyMet) used for tool delivery and privilege escalation
- Go- and later Rust-based Windows encryptors, with separate Linux/ESXi builds used in some attacks
- Supply-chain access through compromised service providers, dealers, or third-party platforms
- Published affiliate rules and 'legal agreements' governing affiliate conduct, per 2024-2025 reporting
Targeted sectors
manufacturingautomotivefinancial servicesIT serviceslegalmedia and publishinghealthcareeducation
Notable public victims
Hoya Corporation (2023), Toyota Financial Services (2023), Nissan Dealer Association Australia (2023, via third-party compromise), Yamaha Motor Philippines customers (2023, via dealer supply-chain intrusion), Synoptek (2025), Lee Enterprises (2025), Philippine Ports Authority, Jouvet SAS, G&S Technologies, Colonial Hyundai
Estimated earnings
No public figure.
Leak-site victims2,257 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| Clifford Paper | · Oct 14, 2025 | Clifford Paper is a family-owned business with a deep legacy in the forest products industry, operating since 1985. They specialize in providing paper products and value-added services, focusing on production management and packaging solution ... |
| MPM Imports | · Oct 14, 2025 | MPM IMPORTS LTD is a family owned business which has been established in September 2013 as a spin off from the MPM GROUP of companies. MPM Imports specializes in importing and distributing a diverse range of products in Cyprus, including cos ... |
| Radiant Beauty Supplies | · Oct 14, 2025 | Radiant Beauty Supplies is a Canadian owned and operated business which has been proudly serving the professional beauty industry since 1968. Focusing on the most sought after global brands, we carry only the finest products in the hair, esth ... |
| Tong Yang Group | · Oct 14, 2025 | Tong Yang Group is a manufacturer of automotive plastics, sheet metal, and cooling products, as well as motorcycle plastics products, molds, and paints. The company was founded in 1952 and is headquartered in Tainan, Taiwan. |
| Club Lleuresport | · Oct 14, 2025 | Club Lleuresport is a versatile organization based in Barcelona dedicated to leisure management, promoting culture, education, and sports for everyone. Since 1992, it has managed various public and private facilities, including civic centers ... |
| Repeated Signal Solutions | · Oct 14, 2025 | Repeated Signal Solutions (RSS) specializes in Cellular, Public Safety, and Wireless Coverage Solutions, offering a wide range of services including engineering, construction management, and managed services since 2004. Their expertise spans ... |
| Catawba County Government | · Oct 14, 2025 | Catawba County, NC provides an online directory to services around the area including Human Resources, Libraries, Sheriff's Office and more. Created for Catawba County and located in North Carolina. |
| HMP Global | · Oct 14, 2025 | For 40 years, the company has built trusted brands including Psych Congress, the premier source for mental health education, and the Symposium on Advanced Wound Care (SAWC), the largest wound care meeting in the world. HMP Global partners wit ... |
| Morris-Sockle | · Oct 14, 2025 | Morris-Sockle, PLLC is a premier law firm specializing in Family Law and Divorce, with over 40 years of experience in protecting clients' rights during and after divorce. They offer a comprehensive range of services including divorce processe ... |
| Capitol Construction Services | · Oct 14, 2025 | For over 25 years, Capitol Construction Services, Inc. has been one of the most professional general contractors in the Indianapolis market and has followed many clients all over the United States. CCSI has become experts in the areas of tena ... |
| Polar-studio | · Oct 14, 2025 | In 1994, the company became a major energy company, marking the beginning of its rapid development in the electrical installation industry. A change of ownership in 2023 will undoubtedly ensure future growth and expansion. Our production fac ... |
| H. Gascon | · Oct 14, 2025 | Assisted by her colleagues, who are authorized to represent her during hearings and interviews at the firm or in companies, Maître Gascon successfully carries out the various tasks entrusted to her:Judicial mandates for safeguard proceedings ... |
| Sistema Odontológico Privado | · Oct 14, 2025 | Sistema Odontológico Privado Srl is a company that operates in the Dental Offices industry. It employs 50to99 people and has 10Mto25M of revenue. The company is headquartered in Cordoba, Cordoba Province, Argentina. The amount of downloaded ... |
| American Journal of Managed Care | · Oct 14, 2025 | Founded in 1995, The American Journal of Managed Care is a multimedia peer-reviewed, Medline-indexed journal that keeps industry leaders on the forefront of various different policies. This company is headquartered in Cranbury, New Jersey. T ... |
| EURORDIS | · Oct 14, 2025 | EURORDIS is an organization dedicated to advocating for, empowering, and engaging individuals affected by rare diseases across Europe. They provide information and support related to rare diseases, facilitate connections among patient organiz ... |
| PQCNC Hospitals | · Oct 14, 2025 | The Perinatal Quality Collaborative of North Carolina is a community-focused organization dedicated to improving maternal and infant health outcomes in the state. They offer various initiatives and resources aimed at enhancing the quality of ... |
| DV Hardwoods | · Oct 14, 2025 | DV Hardwoods, Canada - an undisputed leader in the hardwood lumber sector. In short, the company destroys forests in the country and sells them abroad – to the US and other countries. The company harvests traditional Canadian maple, birch, ... |
| Atarfil | · Oct 14, 2025 | Atarfil Sl is a company that operates in the Repair Services industry. It employs 50to99 people and has 10Mto25M of revenue. The company is headquartered in Atarfe, Andalusia, Spain |
| Greenstar Social Marketing | · Oct 14, 2025 | Greenstar Social Marketing Pakistan (G) Limited is dedicated to improving health outcomes in Pakistan through various initiatives, including social marketing, social franchising, and health systems strengthening. Their services focus on mater ... |
| DuVal & Associates | · Oct 14, 2025 | DuVal & Associates specializes in FDA law, assisting clients in navigating complex regulatory requirements for medical devices, drugs, and food products. Their services include advocacy, regulatory support, compliance guidance, and on-site tr ... |
| Pratt Homes | · Oct 14, 2025 | Pratt Homes was founded in 1973 by Len and Lowell, who, along with their partner Uncle Doug, built their first official Pratt Home in Scandia. They faced student loans but were driven by a passion for quality craftsmanship. Their commitment t ... |
| Force Marketing | · Oct 14, 2025 | Force Marketing, USA - Founded in 2006, Force Marketing is a leading marketing technology provider to the automotive industry, whose Helix Technologies, WeDrive Automotive and DRIVE video technology brands deliver combined synergies to optimi ... |
| M&E Global Group | · Oct 14, 2025 | M&E Global Group, Inc. USA - specializes in point of purchase display and store fixture manufacturing, offering comprehensive services from design to production and fulfillment. Another part of this business is the production of parts such a ... |
| Karnes Electric Cooperative | · Oct 14, 2025 | Karnes Electric Cooperative, USA is a not-for-profit electric distribution utility that serves 12 counties in South Texas and the Coastal Bend region. Headquartered in Karnes City, Texas, it offers competitive rates and innovative solutions t ... |
| Bank3 | · Oct 14, 2025 | Bank3, USA - it's a disaster for the clients. Bank3 is a community-driven banking institution offering personal and business banking services, as well as mortgage lending. The bank serves clients in various locations including Memphis, Nashvi ... |
| San Bernard Electric Cooperative | · Oct 13, 2025 | San Bernard Electric Cooperative, USA - offers a range of services including outage reporting, generator installation, and energy efficiency programs. Its intended clients are members of the community who utilize electric services, as well as ... |
| BHI Co., Ltd. | · Oct 13, 2025 | BHI Co., Ltd. engages in the manufacturing and supplying of power plant equipment worldwide. It offers pulverized coal fired boilers, heat recovery steam generators, circulating fluidized bed combustion boilers, oil and gas boilers, industria ... |
| SourceOne Corporation | · Oct 13, 2025 | SourceOne Corporation, USA - specializes in managing all phases of Outside Plant (OSP) and Inside Plant (ISP) projects, offering comprehensive solutions including fiber design, permitting, construction, and final inspection. The company provi ... |
| hautsdefrance.fr | · Oct 13, 2025 | The Regional Council manages regional programs (economy, transport, education, vocational training, culture/sports, ecology). 1.passports 2.Personal data 3.School incident report |
| Dynamic Precision Sverige | · Oct 12, 2025 | Dynamic Precision Sverige, Norway - is a company that operates in the Electronics industry. The company designs and builds complex microelectronics, starting from an idea, through prototyping and production line development to a mass producti ... |
| Frisquet | · Oct 12, 2025 | Frisquet, France - is a manufacturer specializing in gas boilers and renewable energy solutions, offering a range of products including heat pumps, hot water tanks, and hybrid systems. Their offerings are aimed at both residential and collect ... |
| Valtorta | · Oct 12, 2025 | Valtorta, Italy - develops and manufactures industrial cranes. Valtorta is the natural evolution of TRASMEC srl that has been especially operating in the sector of the bridge cranes since 1969. Its highly skilled staff includes a lot of tech ... |
| Spectra Logic+DATA | · Oct 12, 2025 | ALL THE DATE IS AVAILABLE FOR DOWNLOAD Spectra Logic, USA - data protection and storage company LMAOOOAHHAHA I'm dead!!! Sorry, but this is really really funny. PROTECTION! STORAGE! DATA!!!! On our blog, yes. So, Spectra Logic helps organiz ... |
| Team Schierl Companies | · Oct 12, 2025 | Team Schierl Companies is an organization of retail businesses and real estate development. TSC was founded in 1956 and is currently headquartered in Stevens Point, Wisconsin. Today, the family owned and operated Team Schierl Companies passed ... |
| O'Connor Capital Partners | · Oct 11, 2025 | O'Connor Capital Partners is a real estate investment firm specializing in retail, office, industrial, lodging, and multifamily, which are located in the metropolitan markets of North America and Europe. The firm was founded in 1983 and is ba ... |
| Artan Holding | · Oct 10, 2025 | Artan Holding is a Qatari family-owned holding company with a diverse portfolio of leading businesses in the Education, Real Estate, and Industrial sectors operating primarily in Qatar. Since its founding more than 25 years ago Artan Holding ... |
| grupocaparros.com | · Oct 10, 2025 | Caparrós, Spain - One of the leading companies at the national level for the sale of agricultural products abroad. The company sells local products: tomatoes, peppers, cucumbers, eggplants, zucchini and watermelons. The main sales market is ... |
| www.ucisd.net | · Oct 9, 2025 | Uvalde Consolidated Independent School District, USA - is a public school district based in Uvalde, Texas, US. Located in Uvalde County, the district extends into portions of Zavala and Real counties. It is a progressive, rural school distri ... |
| Midsun Group | · Oct 9, 2025 | Midsun Group, USA specializes in extending the life of power utility equipment through premium silicone covers and coatings. Their innovative products provide solutions for wildlife intrusion and environmental contamination, enhancing reliabi ... |
| MBS Secure | · Oct 9, 2025 | MBS Secure, Ntiva - Ignore your teeth and they'll go away. The same goes for customers. If you leak their confidential data online, they'll leave. That's what happened to MBS Secure, a cybersecurity company. It has many customers, including i ... |
| cameronhodges.com | · Oct 8, 2025 | Cameron, Hodges, Coleman, LaPointe & Wright, USA - No matter where you are in Florida, we are here to leak your data. law firm specializing in insurance defense with over 35 years of experience. They provide legal services to clients across F ... |
| BCR Recouvrement | · Oct 7, 2025 | BCR Recouvrement, located at 129 Rue Servient in Lyon, France, is a company specializing in debt recovery and credit management services. Their mission is to help businesses recover unpaid debts from clients, ensuring that companies can maint ... |
| California Golf Club of San Francisco | · Oct 7, 2025 | California Golf Club of San Francisco, commonly known as Cal Club, is a private golf club established in 1918, originally located in Ingleside before moving to its current 425-acre site in 1924. The club features a world-class golf course des ... |
| www.auto-bernhard.at | · Oct 7, 2025 | Autohaus Bernhard, Germany - The naked truth about “reliable” European cars. The company sells, services, and rents well-known European cars such as Citroën and Opel. The company owns its own dealerships, auto repair shops, and a 2,200 m ... |
| Massachusetts Bay Community College | · Oct 7, 2025 | Massachusetts Bay Community College is a comprehensive, open-access community college, offering associate degrees and certificate programs. We gave MassBay every opportunity to prevent this publication. We engaged their leadership. Their re ... |
| Asahi Group Holdings, Ltd. | · Oct 7, 2025 | Asahi Group Holdings, Japan - a leading manufacturer of beer and non-alcoholic beverages in Japan. Asahi is headquartered in Sumida, Tokyo. It ranked 593rd on the Forbes Global 2000 list of the world's largest companies in 2023. The company's ... |
| Clifford Paper Inc | · Oct 7, 2025 | Clifford Paper Inc, USA - is a family-owned business with a deep legacy in the forest products industry, operating since 1985. They specialize in providing paper products and value-added services. Clifford Paper maintains strong relationships ... |
| kanzlei-schramm.com | · Oct 6, 2025 | Markus Schramm, Rechtsanwalt und Steuerberater, Germany - A lawyer you shouldn't trust with your secrets. As you might guess, its founder, Markus Schramm, is not one for false modesty. He wants his name to be remembered. Well, he has achieved ... |
| Development Services Group, Inc. | · Oct 6, 2025 | Development Services Group, Inc., USA - The most high-profile terrorist attacks and crimes against the public that are being planned. All of this is contained in the reports of Development Services Group, Inc. You have to admit, it's interes ... |
| www.landmarkmgtinc.com | · Oct 6, 2025 | Landmark Management, Inc., manages 90 projects, consisting of 2,462 units across 5 states. Whether you are searching for an apartment to rent or a reliable company to manage your rural development property, let us put our thirty-six years of ... |
In the newsAll →
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .