Qilin ransomware admin allegedly identified as Russian man
Original title: Qilin Ransomware Gang Leader Allegedly Identified as 36-Year-Old Russian Man
A KrebsOnSecurity report ties the alias Haise to Aleksey Yakovtsev using forum, Telegram and leaked records; it is not a court finding.
KrebsOnSecurity published an investigation on November 11 alleging that Qilin administrator “Haise” is Aleksey Mikhailovich Yakovtsev, 36, of St. Petersburg. Researchers linked forum accounts, a Telegram identifier and leaked Russian records; attempts to contact him failed. Qilin, active since September 2022, claims at least 365 victims in the prior three months and pays affiliates at least 80 percent under double extortion. Those victim figures are claims, not verified payments.
Unconfirmed: The identification is a correlation-based allegation, not a judicial finding, and the victim count is claimed rather than independently verified.
- Intel 471 records linked Haise’s June 2022 RAMP application to Telegram user Alexbigboss44.
- Constella tied a reused email address to leaked records naming Yakovtsev.
- A phone number linked to the Telegram identifier was attributed to his sister.
- Cited Qilin techniques include VPN credentials, credential theft and cloud exfiltration.
Impact: Data theft, encryption and threatened publication of stolen information
From the original article
8 min read at gbhackers.com
The administrator of the Qilin ransomware operation has allegedly been identified as Aleksey Mikhailovich Yakovtsev, a 36-year-old St. Petersburg resident. A KrebsOnSecurity investigation published November 11 connects the underground identity “Haise” to Yakovtsev through historical forum accounts, Telegram identifiers, and breached records.
By Divya · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.