Ransomware Group intelligence
Qilin
ActiveTrack Qilin with 2263 published victims and 5 known leak locations in a single intelligence view.
Overview
Qilin is tracked by Breach House as a ransomware group with 2263 published victims.
United States is currently the most targeted country in this dataset.
5 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (5)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion |
| Leak location 2 | Onion service | Unknown | kbsqoivihgdmwczmxkbovk7ss2dcynitwhhfu5yw725dboqo5kthfaad.onion |
| Leak location 3 | Onion service | Unknown | ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion |
| Leak location 4 | Onion service | Unknown | b4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion |
| Leak location 5 | Onion service | Unknown | ji57fr53anp7wb44tbbnp72qcgbhqywy4jmbncawdcrejj5amuvh3zqd.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (2263)
Search, filter and paginate the victim timeline for Qilin. Showing 1101–1200 of 2263.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | Marta Montserrat Areny Guerrero ABOGADO id24531 View details | Spain | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Sanko Air Conditioning Co., Ltd. id24530 View details | Japan | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | Towerstream id24474 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Khazzan Logistics id24473 View details | Oman | Transportation / Travel / Logistics | ||
|
No additional victim description available. |
|||||
| Ransomware | Kasapreko id24472 View details | Ghana | Communication / Marketing | ||
|
No additional victim description available. |
|||||
| Ransomware | Diesel Electric id24471 View details | South Africa | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Canvas Church id24470 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | UniqueTech Engineering id24469 View details | Türkiye | IT | ||
|
No additional victim description available. |
|||||
| Ransomware | Beecher Walker Architects id24458 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Shumate Mechanical id24453 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Kana Pipeline Inc id24440 View details | United States | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | Medisend id24439 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Scientology id24437 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Espaço Casa id24436 View details | Portugal | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | McManes Law id24434 View details | United States | Finance / Legal / Insurance | ||
|
No additional victim description available. |
|||||
| Ransomware | Institutional & Supermarket Equipment id24433 View details | United States | Retail / E-commerce | ||
|
No additional victim description available. |
|||||
| Ransomware | Peter Meijer Architect id24432 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Maset id24431 View details | Spain | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Yellow Cab of Columbus id24428 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | IES Synergy id24425 View details | France | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Clayco Electric id24423 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Gandía Palace Hotel id24422 View details | Spain | Hospitality / Food & Beverage / Tourism | ||
|
No additional victim description available. |
|||||
| Ransomware | Valley Eye Associates id24421 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | COTTAGE id24420 View details | United States | Healthcare / Pharma | ||
|
No additional victim description available. |
|||||
| Ransomware | Mainetti UK id24417 View details | United Kingdom | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | CST Coal id24416 View details | Canada | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | LA Injury Attorneys id24406 View details | United States | Finance / Legal / Insurance | ||
|
No additional victim description available. |
|||||
| Ransomware | Brodosplit id24405 View details | Croatia | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | City of Urbana id24404 View details | United States | Public Sector | ||
|
No additional victim description available. |
|||||
| Ransomware | NUMALLIANCE id24403 View details | France | Retail / E-commerce | ||
|
No additional victim description available. |
|||||
| Ransomware | Moyes id24390 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | VENZI & PAGANINI AG id24383 View details | Switzerland | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | GreenBest id24382 View details | United Kingdom | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | EDIS id24381 View details | Austria | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Saca Industrie SpA id24380 View details | Italy | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Oriental Castle Sdn Bhd id24379 View details | Malaysia | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Mr Christmas id24378 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Tlusty & Kennedy id24365 View details | United States | Finance / Legal / Insurance | ||
|
No additional victim description available. |
|||||
| Ransomware | San Miguel id24354 View details | Argentina | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | France terre d'asile id24353 View details | France | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | B dynamic id24352 View details | Australia | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | HASCO Hasenclever id24348 View details | Germany | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Virtualware Solutions id24347 View details | Spain | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | Veton Ai id24317 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | ILCA Targhe s.r.l. id24316 View details | Italy | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Battaglioli id24315 View details | Italy | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Asia Condominium Association id24313 View details | United States | NGOs / Associations | ||
|
No additional victim description available. |
|||||
| Ransomware | Bomchil id24312 View details | Argentina | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | TBC Consoles id24311 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | CJW id24310 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Chenango Valley Technologies id24309 View details | United States | IT | ||
|
No additional victim description available. |
|||||
| Ransomware | Zoya id24294 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Weiss id24293 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Kleber and Associates id24292 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Williamson County, TX id24291 View details | United States | Public Sector | ||
|
No additional victim description available. |
|||||
| Ransomware | Comansco id24278 View details | United Kingdom | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | ERR Raumplaner id24275 View details | Germany | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Bcfpers id24274 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | United Volleyball Supply id24273 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Santa Paula id24266 View details | United States | Public Sector | ||
|
No additional victim description available. |
|||||
| Ransomware | WLR Precision Engineering id24263 View details | United Kingdom | Communication / Marketing | ||
|
No additional victim description available. |
|||||
| Ransomware | The American School Foundation id24259 View details | Mexico | Education | ||
|
No additional victim description available. |
|||||
| Ransomware | St. Johns River Water Management District id24257 View details | United States | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | Arabia Holding id24234 View details | Egypt | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Trolec id24233 View details | Canada | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | BioPharma Services id24227 View details | Canada | Healthcare / Pharma | ||
|
No additional victim description available. |
|||||
| Ransomware | Disston id24226 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Burnham Brown id24223 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Eastek International id24222 View details | United States | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | Workflow Concepts id24221 View details | Australia | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Lake Superior State University id24217 View details | United States | Education | ||
|
No additional victim description available. |
|||||
| Ransomware | Paal id24216 View details | Germany | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Inspire Communities id24215 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | New England Tractor Trailer Training School id24214 View details | United States | Education | ||
|
No additional victim description available. |
|||||
| Ransomware | Christofle id24213 View details | France | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Columbia Medical Practice id24211 View details | United States | Communication / Marketing | ||
|
No additional victim description available. |
|||||
| Ransomware | Nottingham Village id24193 View details | United Kingdom | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Zecher id24192 View details | Germany | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Blue Projects id24191 View details | Romania | Communication / Marketing | ||
|
No additional victim description available. |
|||||
| Ransomware | HYTORC id24188 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | NovAtel (belongs to Hexagon) id24177 View details | Canada | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Maheu&Maheu id24159 View details | Canada | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Cal-Comp Electronics Public id24158 View details | Mexico | Public Sector | ||
|
No additional victim description available. |
|||||
| Ransomware | Cayuga Milk Ingredients id24156 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | The Hunnicutt Law Group id24155 View details | United States | Finance / Legal / Insurance | ||
|
No additional victim description available. |
|||||
| Ransomware | Berts Electric id24154 View details | Canada | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Capp Shupak id24153 View details | Canada | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Nissan Capital id24150 View details | Japan | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Mmlk id24135 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Kajima Europe id24131 View details | United Kingdom | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Interlink Trade Services id24129 View details | United Kingdom | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | Alma Realty id24088 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | XOX Mobile id24086 View details | Malaysia | Telecommunications | ||
|
No additional victim description available. |
|||||
| Ransomware | Fayette County id24031 View details | United States | Public Sector | ||
|
No additional victim description available. |
|||||
| Ransomware | Cimertex id24024 View details | Portugal | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Sakol Energy Public id24019 View details | Thailand | Energy | ||
|
No additional victim description available. |
|||||
| Ransomware | Mae Krathing Power Company id24018 View details | Thailand | Energy | ||
|
No additional victim description available. |
|||||
| Ransomware | N15 Technology id24017 View details | United States | IT | ||
|
No additional victim description available. |
|||||
| Ransomware | IGT id24005 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Marine Foods Express LTD id23991 View details | Japan | Agriculture / Food | ||
|
No additional victim description available. |
|||||