Krebs links Qilin ransomware admin to a man in St. Petersburg
Original title: Who Runs the Ransomware Group Qilin?
NCC Group ranks Qilin the busiest ransomware-as-a-service program, with at least 365 claimed victims in three months.
Brian Krebs reports that operational-security mistakes over a decade point to a 36-year-old man in St. Petersburg as administrator of Qilin. The Russia-based group has operated since September 2022. NCC Group this month calls it the most active ransomware affiliate program.
Unconfirmed: The identification rests on Brian Krebs's reporting of operational-security mistakes, not a criminal charge.
- Qilin claims at least 365 victim organizations in the past three months.
- Krebs previously profiled The Gentlemen, then ranked second most active.
- The group has run as ransomware-as-a-service since September 2022.
- Threat actors
- QilinThe Gentlemen
- Organizations
- NCC Group
- Countries
- Russia
From the original article
2 min read at databreaches.netBrian Krebs reports: The cybercrime group Qilin has emerged as the world’s most active ransomware affiliate program, claiming at least 365 victim organizations in the past three months alone. But even top Russian hackers make operational security mistakes, and the administrator of Qilin has made a few key missteps over the last decade that all...
By Dissent · databreaches.net
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.