Ransomware Group intelligence
Qilin
ActiveTrack Qilin with 2263 published victims and 5 known leak locations in a single intelligence view.
Overview
Qilin is tracked by Breach House as a ransomware group with 2263 published victims.
United States is currently the most targeted country in this dataset.
5 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (5)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion |
| Leak location 2 | Onion service | Unknown | kbsqoivihgdmwczmxkbovk7ss2dcynitwhhfu5yw725dboqo5kthfaad.onion |
| Leak location 3 | Onion service | Unknown | ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion |
| Leak location 4 | Onion service | Unknown | b4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion |
| Leak location 5 | Onion service | Unknown | ji57fr53anp7wb44tbbnp72qcgbhqywy4jmbncawdcrejj5amuvh3zqd.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (2263)
Search, filter and paginate the victim timeline for Qilin. Showing 1–100 of 2263.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | Universitatea De Vest Vasile Goldi Din Arad id31198 View details | Romania | NGOs / Associations | ||
|
UVVG.ro is a Romanian-based organization operating in the NGOs and Associations sector. The entity provides various services and support to its members and the community. UVVG.ro is listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | Universitatea De Vest Vasile Goldi Din Arad id31198 View details | Romania | NGOs / Associations | ||
|
N/A |
|||||
| Ransomware | Service Electric id31184 View details | United States | Finance / Legal / Insurance | ||
|
SECV operates in the finance, legal, and insurance sector in the US, providing various services to its clients. The company is involved in financial and legal services, catering to the needs of its customers. SECV was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Service Electric id31184 View details | United States | Finance / Legal / Insurance | ||
|
N/A |
|||||
| Ransomware | Freedom Claims Management id31168 View details | United States | Finance / Legal / Insurance | ||
|
Freedom Claims Inc is a US-based company operating in the finance, legal, and insurance sectors. The company likely provides claims-related services to its clients. Freedom Claims Inc was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Freedom Claims Management id31168 View details | United States | Finance / Legal / Insurance | ||
|
N/A |
|||||
| Ransomware | INTERTRUST AUSTRALIA PTY LTD id31164 View details | Australia | Finance / Legal / Insurance | ||
|
Seed Outsourcing is a company based in Australia, operating in the finance, legal, and insurance sector. They provide outsourcing services to clients in these industries. Seed Outsourcing was listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | INTERTRUST AUSTRALIA PTY LTD id31164 View details | Australia | Finance / Legal / Insurance | ||
|
N/A |
|||||
| Ransomware | Asset Flooring Group Australia id31165 View details | Australia | Construction / Real Estate | ||
|
Asset Flooring is a company based in Australia, operating in the construction and real estate sector, providing various flooring services. The company is involved in the installation and maintenance of flooring systems for residential and commercial properties. Asset Flooring was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Asset Flooring Group Australia id31165 View details | Australia | Construction / Real Estate | ||
|
N/A |
|||||
| Ransomware | Mairie de Drancy id31162 View details | France | Public Sector | ||
|
The official website of Drancy, a commune in the Seine-Saint-Denis department in the Île-de-France region of France, provides information and services to its residents and visitors. As a public sector entity, it offers various municipal services and resources. Drancy was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Mairie de Drancy id31162 View details | France | Public Sector | ||
|
N/A |
|||||
| Ransomware | Wire Products id31153 View details | United States | Manufacturing / Engineering | ||
|
Wireproducts.us is a US-based company operating in the manufacturing and engineering sector. The company likely provides various wire products and engineering services to its clients. Wireproducts.us is listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Wire Products id31153 View details | United States | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | The Saturday Evening Post id31140 View details | United States | Communication / Marketing | ||
|
The Saturday Evening Post is a storied American magazine that has been in publication since 1821, focusing on topics such as lifestyle, culture, and current events. As a leading publication in the communication and marketing sector, it caters to a wide audience in the United States. The Saturday Evening Post offers a range of content, including articles, stories, and features on various subjects. It was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | The Saturday Evening Post id31140 View details | United States | Communication / Marketing | ||
|
N/A |
|||||
| Ransomware | Commercial Furniture Interiors id31141 View details | United States | Finance / Legal / Insurance | ||
|
CFI Office is a financial services company based in the US, operating in the finance, legal, and insurance sector. The company provides various financial services to its clients. CFI Office was listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | Commercial Furniture Interiors id31141 View details | United States | Finance / Legal / Insurance | ||
|
N/A |
|||||
| Ransomware | Dienst Pack Systems id31142 View details | Germany | Manufacturing / Engineering | ||
|
Dienst PackSystems is a company based in Germany, operating in the manufacturing and engineering sector. The company likely provides packaging systems and related services to its clients. Dienst PackSystems was listed as a ransomware victim associated with Qilin. |
|||||
| Ransomware | Dienst Pack Systems id31142 View details | Germany | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | Ceragres id31143 View details | Canada | Construction / Real Estate | ||
|
Ceragres is a Canadian company operating in the construction and real estate sector, offering various services related to these fields. Located in Canada, the company provides solutions for construction and real estate needs. Ceragres was listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | Ceragres id31143 View details | Canada | Construction / Real Estate | ||
|
N/A |
|||||
| Ransomware | Pointe Property Group id31144 View details | United States | Construction / Real Estate | ||
|
PointeCre is a company operating in the construction and real estate sector in the United States. The company likely provides various services related to property development and management. PointeCre was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Pointe Property Group id31144 View details | United States | Construction / Real Estate | ||
|
N/A |
|||||
| Ransomware | Schreiner Trockenbau GmbH id31145 View details | Austria | Construction / Real Estate | ||
|
Schreiner Trockenbau is an Austrian company operating in the construction and real estate sector, providing various services related to dry construction. The company is based in Austria and offers its services to clients in the region. Schreiner Trockenbau is listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Schreiner Trockenbau GmbH id31145 View details | Austria | Construction / Real Estate | ||
|
N/A |
|||||
| Ransomware | Community Management Associates id31116 View details | United States | Finance / Legal / Insurance | ||
|
CMA Management is a financial services company based in the United States, operating within the finance, legal, and insurance sectors. The company provides various financial management and advisory services to its clients. CMA Management was listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | Community Management Associates id31116 View details | United States | Finance / Legal / Insurance | ||
|
N/A |
|||||
| Ransomware | The Dcoop id31078 View details | Spain | Agriculture / Food | ||
|
Dcoop is a Spanish agricultural cooperative based in Spain, operating in the agriculture and food sector. The entity provides various services and offerings to its members and the agricultural community. Dcoop es was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | The Dcoop id31078 View details | Spain | Agriculture / Food | ||
|
N/A |
|||||
| Ransomware | Hawaii Family Dental id31074 View details | United States | Healthcare / Medicine | ||
|
Hawaii Family Dental is a healthcare service provider based in the United States, offering dental care services to patients. As a part of the healthcare sector, the company operates in the medical field, providing essential services to the community. Hawaii Family Dental was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Hawaii Family Dental id31074 View details | United States | Healthcare / Medicine | ||
|
N/A |
|||||
| Ransomware | Audio Precision, Inc id31066 View details | United States | Communication / Marketing | ||
|
The Associated Press, or AP.com, is a US-based news organization operating in the communication and marketing sector, providing fact-based news and journalism services. AP.com offers a wide range of news coverage, including national, international, sports, and entertainment news. AP.com is listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | Audio Precision, Inc id31066 View details | United States | Communication / Marketing | ||
|
N/A |
|||||
| Ransomware | TenSparrows id31057 View details | United States | IT | ||
|
Tensparrows is an IT company based in the United States, operating in the information technology sector. The company likely provides various IT services and solutions to its clients. Tensparrows was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | TenSparrows id31057 View details | United States | IT | ||
|
N/A |
|||||
| Ransomware | Db Tarimsal Enerji id31054 View details | Türkiye | Agriculture / Food | ||
|
DB Tarimsal Enerji is a Turkish company operating in the agriculture and food sector. The company is based in Turkey and is involved in activities related to agricultural products and energy. DB Tarimsal Enerji is listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | Db Tarimsal Enerji id31054 View details | Türkiye | Agriculture / Food | ||
|
N/A |
|||||
| Ransomware | Byonyks id31056 View details | United States | IT | ||
|
Byonyks is an IT company based in the United States, operating in the information technology sector. The company provides various IT services and solutions to its clients. Byonyks was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Byonyks id31056 View details | United States | IT | ||
|
N/A |
|||||
| Ransomware | Prenisac id31049 View details | Other | |||
|
Prenisac operates in the other sector, providing various services. The company's specific location and offerings are not well-documented. Prenisac was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Prenisac id31049 View details | United States | Other | ||
|
N/A |
|||||
| Ransomware | Excel Consultores id31050 View details | Mexico | Finance / Legal / Insurance | ||
|
Excel.com.mx is a Mexican financial services company providing insurance and legal solutions. Located in Mexico, the company operates in the finance and insurance sector, offering various financial products. Excel.com.mx is listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Excel Consultores id31050 View details | Mexico | Finance / Legal / Insurance | ||
|
N/A |
|||||
| Ransomware | Affinity Capital id31051 View details | United States | Finance / Legal / Insurance | ||
|
Affinitycorp net operates in the finance legal and insurance sector in the US providing various services to its clients. As a company in this sector it likely handles sensitive financial and personal data. Affinitycorp net was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Affinity Capital id31051 View details | United States | Finance / Legal / Insurance | ||
|
N/A |
|||||
| Ransomware | Adpo id31042 View details | Belgium | Transportation / Travel / Logistics | ||
|
ADPO is a logistics and transportation company based in Belgium, operating in the transportation, travel, and logistics sector. The company provides various services to facilitate the movement of goods and people. ADPO was listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | Adpo id31042 View details | Belgium | Transportation / Travel / Logistics | ||
|
N/A |
|||||
| Ransomware | servitelco id31043 View details | Chile | Telecommunications | ||
|
Servitelco is a telecommunications company based in Chile, providing various services to its customers. The company operates in the telecommunications sector, offering services such as internet, phone, and other related services. Servitelco was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | servitelco id31043 View details | Chile | Telecommunications | ||
|
N/A |
|||||
| Ransomware | Orimar id31044 View details | Belgium | Manufacturing / Engineering | ||
|
Orimar.be is a company based in Belgium, operating in the manufacturing and engineering sector. The company likely provides various services and products related to its sector. Orimar.be was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Orimar id31044 View details | Belgium | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | Indian Motos Inmot id31045 View details | Ecuador | Construction / Real Estate | ||
|
Inmot.com.ec is a company based in Ecuador, operating in the construction and real estate sector, providing various services to clients. The company's website suggests a focus on property development and management. Inmot.com.ec is listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Indian Motos Inmot id31045 View details | Ecuador | Construction / Real Estate | ||
|
N/A |
|||||
| Ransomware | Hoc id31020 View details | United Kingdom | Manufacturing / Engineering | ||
|
HOC Ltd is a company based in the United Kingdom, operating in the manufacturing and engineering sector. The company provides various services and products related to its sector. HOC Ltd was listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | Hoc id31020 View details | United Kingdom | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | Gran valle negocios id31006 View details | Argentina | Retail / E-commerce | ||
|
Granvallenegocios.com.ar operates in the retail and e-commerce sector in Argentina, providing various products and services to its customers. As an e-commerce platform, it likely offers online shopping experiences, allowing users to browse and purchase products remotely. Granvallenegocios.com.ar was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Gran valle negocios id31006 View details | Argentina | Retail / E-commerce | ||
|
N/A |
|||||
| Ransomware | Groupe Fenwick id30987 View details | France | Retail / E-commerce | ||
|
Fenwick.fr is a French company operating in the retail and e-commerce sector, offering various products and services to its customers. Located in France, the company caters to the needs of its clients through its online platform. Fenwick.fr is listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Groupe Fenwick id30987 View details | France | Retail / E-commerce | ||
|
N/A |
|||||
| Ransomware | Savills France id30970 View details | France | Construction / Real Estate | ||
|
Savills is a global real estate company with operations in France, providing services such as property development, investment, and management. The company operates in the construction and real estate sector, offering a range of services to clients in France. Savills France was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Savills France id30970 View details | France | Construction / Real Estate | ||
|
N/A |
|||||
| Ransomware | Wilbert's id30971 View details | United States | Hospitality / Food & Beverage / Tourism | ||
|
Wilberts.com is a US-based company operating in the hospitality and food and beverage sector, likely providing services to the tourism industry. As a business in this sector, Wilberts.com may offer various amenities and experiences to its customers. Wilberts.com was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Wilbert's id30971 View details | United States | Hospitality / Food & Beverage / Tourism | ||
|
N/A |
|||||
| Ransomware | Contacto Garantido id30881 View details | Mexico | Retail / E-commerce | ||
|
Contactogarantido.com is a Mexican company operating in the retail and e-commerce sector, providing various online services to its customers. Based in Mexico, the company likely offers a range of products and services to cater to the local market. Contactogarantido.com was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Contacto Garantido id30881 View details | Mexico | Retail / E-commerce | ||
|
N/A |
|||||
| Ransomware | Universitatea de Vest „Vasile Goldiș” din Arad id30882 View details | Romania | NGOs / Associations | ||
|
UVVG RO is a Romanian non-governmental organization operating in the country. The entity is involved in various activities related to NGOs and associations in Romania. UVVG RO was listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | Universitatea de Vest „Vasile Goldiș” din Arad id30882 View details | Romania | NGOs / Associations | ||
|
N/A |
|||||
| Ransomware | Jubilee Jobs id30843 View details | Nigeria | NGOs / Associations | ||
|
Jubileejobs.org is a non-governmental organization based in Nigeria, focused on providing job opportunities and related services. The organization operates in the NGOs and associations sector, catering to the needs of the local community. Jubileejobs.org was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Jubilee Jobs id30843 View details | Nigeria | NGOs / Associations | ||
|
N/A |
|||||
| Ransomware | Plitvička Jezera Nacionalni Park id30844 View details | Croatia | Transportation / Travel / Logistics | ||
|
NP Plitvicka Jezera is a national park located in Croatia, known for its natural beauty and tourism offerings. As a prominent destination in the country's travel and logistics sector, it provides various services to visitors. The national park is situated in the Plitvice Lakes area, attracting numerous tourists each year. It was listed as a ransomware victim associated with Qilin. |
|||||
| Ransomware | Plitvička Jezera Nacionalni Park id30844 View details | Croatia | Transportation / Travel / Logistics | ||
|
N/A |
|||||
| Ransomware | The Myers Y Cooper id30845 View details | United States | Manufacturing / Engineering | ||
|
Cooper Co is a US-based company operating in the manufacturing and engineering sector, providing various products and services. The company is involved in the design, development, and production of engineered products. Cooper Co has a presence in the US market, serving customers across the country. It was listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | The Myers Y Cooper id30845 View details | United States | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | Guntert & Zimmerman id30841 View details | Switzerland | Manufacturing / Engineering | ||
|
Guntert is a company based in Switzerland, operating in the manufacturing and engineering sector. The company likely provides various products and services related to its sector. Guntert was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Guntert & Zimmerman id30841 View details | Switzerland | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | Principle Diagnostics Laboratory id30842 View details | India | Healthcare / Pharma | ||
|
Principlediagnostics.com is a healthcare and pharma company based in India, offering various medical services. The company operates in the healthcare sector, providing diagnostic services. Principlediagnostics.com was listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | Principle Diagnostics Laboratory id30842 View details | India | Healthcare / Pharma | ||
|
N/A |
|||||
| Ransomware | GURR Abdichtungstechnik GmbH id30839 View details | Germany | Manufacturing / Engineering | ||
|
Gurr Abdichtungstechnik is a German-based company operating in the manufacturing and engineering sector, providing sealing technology solutions. The company is located in Germany and offers various products and services related to sealing technology. Gurr Abdichtungstechnik is listed as a ransomware victim associated with qilin |
|||||
| Ransomware | GURR Abdichtungstechnik GmbH id30839 View details | Germany | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | GOP id30833 View details | United Kingdom | Transportation / Travel / Logistics | ||
|
Go Ltd is a company operating in the transportation sector in Great Britain, providing logistics and travel services. The company is based in the United Kingdom and offers various services to its clients. Go Ltd was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | GOP id30833 View details | United Kingdom | Transportation / Travel / Logistics | ||
|
N/A |
|||||
| Ransomware | Stryker id30825 View details | United States | Manufacturing / Engineering | ||
|
Stryker is a leading American manufacturer of medical and surgical equipment, operating in the manufacturing and engineering sector. The company, headquartered in the US, offers a wide range of products and services. Stryker was listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | Stryker id30825 View details | United States | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | Ejército Argentino id30820 View details | Argentina | Public Sector | ||
|
The www.argentina.gob.ar/defensa/ejercito website is the official online presence of the Argentine Army, a branch of the Argentine Armed Forces, operating under the Ministry of Defense in Argentina. The Argentine Army is responsible for land-based military operations, and its website provides information on its structure, operations, and activities. The website is part of the public sector in Argentina, offering various services and information to citizens. It was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Ejército Argentino id30820 View details | Argentina | Public Sector | ||
|
N/A |
|||||
| Ransomware | Kean University id30821 View details | United States | Education | ||
|
Kean University is a public university located in New Jersey, United States, offering a range of undergraduate and graduate degree programs in various fields. As an institution in the education sector, it provides academic and research opportunities to students. Kean University was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Kean University id30821 View details | United States | Education | ||
|
N/A |
|||||
| Ransomware | Highline Community College id30822 View details | United States | Education | ||
|
Highline College, located in the United States, is a public college that offers various academic programs and services to students. As an educational institution, it provides opportunities for students to pursue higher education in different fields. Highline College was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Highline Community College id30822 View details | United States | Education | ||
|
N/A |
|||||
| Ransomware | Machinerie P&W id30777 View details | Canada | Manufacturing / Engineering | ||
|
Machinerie PW is a company based in Canada, operating in the manufacturing and engineering sector. The company likely provides machinery and equipment to various industries. Machinerie PW was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Machinerie P&W id30777 View details | Canada | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | ABM Enviro id30778 View details | Canada | Services | ||
|
ABM Environnement, a services company based in Canada, provides environmental solutions. The company operates in the services sector, offering various services to its clients. ABM Environnement was listed as a ransomware victim associated with Qilin. |
|||||
| Ransomware | ABM Enviro id30778 View details | Canada | Services | ||
|
N/A |
|||||
| Ransomware | WellPerf id30771 View details | United Kingdom | Healthcare / Pharma | ||
|
Wellperf is a UK-based company operating in the healthcare and pharmaceutical sector, providing various services and offerings. The company is likely involved in the development, distribution, or research of pharmaceutical products. Wellperf was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | WellPerf id30771 View details | United Kingdom | Healthcare / Pharma | ||
|
N/A |
|||||
| Ransomware | Corporate 360 Business Solutions id30766 View details | Canada | IT | ||
|
Corporate360.ca is a Canadian company operating in the IT sector, providing various services to its clients. As an IT company, Corporate360.ca likely offers a range of services including software development, consulting, and technology solutions. Corporate360.ca was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Corporate 360 Business Solutions id30766 View details | Canada | IT | ||
|
N/A |
|||||
| Ransomware | Assos Pharmaceuticals id30767 View details | Türkiye | Healthcare / Pharma | ||
|
Assos Pharma is a Turkish company operating in the healthcare and pharmaceutical sector, providing various products and services. The company is based in Turkey and serves the local market with its offerings. Assos Pharma was listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | Assos Pharmaceuticals id30767 View details | Türkiye | Healthcare / Pharma | ||
|
N/A |
|||||