Ransomware Group intelligence
Qilin
ActiveTrack Qilin with 2263 published victims and 5 known leak locations in a single intelligence view.
Overview
Qilin is tracked by Breach House as a ransomware group with 2263 published victims.
United States is currently the most targeted country in this dataset.
5 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (5)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion |
| Leak location 2 | Onion service | Unknown | kbsqoivihgdmwczmxkbovk7ss2dcynitwhhfu5yw725dboqo5kthfaad.onion |
| Leak location 3 | Onion service | Unknown | ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion |
| Leak location 4 | Onion service | Unknown | b4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion |
| Leak location 5 | Onion service | Unknown | ji57fr53anp7wb44tbbnp72qcgbhqywy4jmbncawdcrejj5amuvh3zqd.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (2263)
Search, filter and paginate the victim timeline for Qilin. Showing 2201–2263 of 2263.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | ZGEO id10741 View details | Austria | Other | — | |
|
The company makes a decision to ignore us, all personal data are open and available for download below. |
|||||
| Ransomware | wannago.cloud id10739 View details | United Arab Emirates | IT | — | |
|
This service declares about its safety qualities and storing data in its site: "\COPIA - Backup as a service\ \DUplicato - Disaster recovery as a service\ \Controllo - Firewall as a service\ \ARCHIVO - Archival as a service\ \Securro - Secur ... |
|||||
| Ransomware | Commonwealth Sign id10659 View details | United States | Other | — | |
|
The company has chosen to ignore us means its data will be open and available for download below. |
|||||
| Ransomware | mordfin id10590 View details | United States | Construction / Real Estate | ||
|
The Mordfin Group was founded in 1922. The company provides accounting, tax, real estate, luxury, auditing, and estate planning services.Now you can download all data from this company. |
|||||
| Ransomware | wannagocloud id10564 View details | United Arab Emirates | IT | ||
|
you have a few days left until your customers are hurt by you. |
|||||
| Ransomware | neafidi id10563 View details | Italy | Finance / Legal / Insurance | ||
|
On February 2, we will publish personal data, financial statements and other confidential information |
|||||
| Ransomware | PROJECTSW id10465 View details | Saudi Arabia | Communication / Marketing | ||
|
The company makes a decision to ignore us, all personal data are open and available for download below. |
|||||
| Ransomware | F J O'Hara & Sons id10434 View details | United States | IT | — | |
|
F J O'Hara & Sons Inc is a company that operates in the Information Technology and Services industry. It employs 11-20 people and has $5M-$10M of revenue. The company is headquartered in Boston, Massachusetts. We have a lot of data from this ... |
|||||
| Ransomware | hotelcontinental.no id10410 View details | Norway | Hospitality / Food & Beverage / Tourism | — | |
|
We are waiting for you in the beginning of the next week. Hurry up... |
|||||
| Ransomware | molnar&partner id10385 View details | Hungary | Other | — | |
|
All data of this company will be available for download on 15.01.2024 |
|||||
| Ransomware | Corinth Coca-Cola Bottling Works id10376 View details | United States | Retail / E-commerce | — | |
|
Corinth Coca-Cola Bottling Works Grocery Retail · Mississippi, United States · 109 Employees About Corinth Coca-Cola Bottling Works Inc.: Corinth Coca-Cola Bottling Works, Inc. is a privately held, family-owned Coca-Cola bottling and di ... |
|||||
| Ransomware | HALLEONARD id10373 View details | Australia | Communication / Marketing | — | |
|
We are a subsidiary of Hal Leonard Corporation who, founded in 1947, is the world leader in the print music industry. Selling products in more than 65 countries around the world, Hal Leonard Corporation represents in print some of the world's ... |
|||||
| Ransomware | EPS.RS id10314 View details | Serbia | Energy | — | |
|
The joint stock company "Electric Power Industry of Serbia" is the largest company in Serbia, the economic and energy support of the country. The main activities of EPS AD are production, supply and trade of electricity. EPS is fully committe ... |
|||||
| Ransomware | Ware Manufacturing id9889 View details | Manufacturing / Engineering | — | ||
|
Family-owned for 25 years, we make innovative, fun products that enrich the lives of pets and their people, at a great value.Soon you will be able to download all the data taken from this company. |
|||||
| Ransomware | Neurology Center of Nevada id9888 View details | Healthcare / Pharma | — | ||
|
Neurology Center of Nevada™s medical team specializes in the diagnosis and treatment of the Nervous System and Neurological Disorders. Soon you will be able to download all the data taken from this company. |
|||||
| Ransomware | CMS Communications id9845 View details | Communication / Marketing | — | ||
|
CMS Solutions, founded in 1985, is a communications solutions provider. It offers new and refurbished voice, data, mobile products, advanced IP telephone systems and technical support. CMS Solutions serves a wide range of organizations from m ... |
|||||
| Ransomware | Great Lakes Technologies id9843 View details | IT | — | ||
|
Great Lakes Technologies & Manufacturing LLC promotes a culture of innovation and is committed to eliminating waste, costly duplication of efforts and production start-up problems for our customers. We accomplish this by providing proprietary ... |
|||||
| Ransomware | Yanfeng id9730 View details | Manufacturing / Engineering | — | ||
|
Yanfeng is a leading global automotive supplier, focusing on interior, exterior, seating, cockpit electronics, and passive safety, and is exploring new business actively. Yanfeng has more than 240 locations and approximately 57,000 employees ... |
|||||
| Ransomware | HAESUNG DS CO Ltd id9608 View details | Services | — | ||
|
We will publish data on next week |
|||||
| Ransomware | Epstein Law id9596 View details | Finance / Legal / Insurance | — | ||
|
Established in 1958, Epstein Law serves clients throughout the Greater Vancouver Area. Led by Mark Epstein, we have a reputation for providing quality and professional legal services Soon you will be able to download all the data taken fro ... |
|||||
| Ransomware | Assurius.be id9393 View details | Belgium | Other | — | |
|
Coming soon... |
|||||
| Ransomware | unique-relations.at id9392 View details | Austria | Other | — | |
|
We will publish data on next week |
|||||
| Ransomware | SG World id9232 View details | Other | — | ||
|
Company data will be made available for download below |
|||||
| Ransomware | Paul-Alexandre Doïcesco, Notaires Associés id9219 View details | Belgium | Other | ||
|
The company has chosen to ignore us means its data will be open and available for download below. |
|||||
| Ransomware | Cardiovascular Consultants Ltd id9218 View details | Services | |||
|
You can download all personal data of clients and employees of this company below |
|||||
| Ransomware | WT PARTNERSHIP id9009 View details | Services | — | ||
|
WT Partnership Asia provides project management, cost management & specialist consultancy advisory services for the property & construction industries. "Our risk and value focused approach supports our clients by delivering financially rob ... |
|||||
| Ransomware | DiTRONICS Financial Services id8965 View details | Services | — | ||
|
"DiTRONICS continues to define the future of funds access with a fully integrated suite of products and services that includes ATMs, Ticket Redemption Kiosks, Check Guarantee Software, Cash Advance Software, and now offers a Title 31 complian ... |
|||||
| Ransomware | Siamese Asset id8866 View details | Thailand | Public Sector | — | |
|
In the near future we will be publishing more data related to very interesting money laundering schemes. The state should be interested in what these guys are doing :) |
|||||
| Ransomware | CORTEL Technologies id8589 View details | IT | — | ||
|
Cortel is a cloud technology vendor that partners with businesses to deploy phone systems that connect customers to businesses. Below you can see a small part of the data which were taken from the servers of this company. |
|||||
| Ransomware | PAUL-ALEXANDRE DOICESCO id8543 View details | Belgium | Other | — | |
|
The company did not give a damn about the security of its customers' data, so you can download all this from the link below. archive password: passwordbe |
|||||
| Ransomware | WACOAL id8542 View details | Telecommunications | — | ||
|
Wacoal America is an apparel & fashion company specializing in lingerie and intimate wear. In the near future, we will publish a large leak from the network of this company. Including all customer data. |
|||||
| Ransomware | GYP New Tree SA id8313 View details | Argentina | Manufacturing / Engineering | ||
|
GYP NEW TREE SA is a wholesale importer operating in the market since 1998, marketing brands that are synonymous with excellence and innovation. We integrate the value chain of these brands, either with local assembly of PCs and AIOs, or with ... |
|||||
| Ransomware | Thonburi Energy Storage Systems (TESM) id8080 View details | Thailand | Energy | ||
|
The company has decided not to contact our team in any way so we are starting a large publication of various documents At the moment you can read the screenshots below |
|||||
| Ransomware | Better System Co.,Ltd id7245 View details | Thailand | Services | ||
|
Some of the data taken from the servers of this company can be found below |
|||||
| Ransomware | MicroPort Scientific / LivaNova id7221 View details | Agriculture / Food | |||
|
Our team has prepared a big announcement for the public to check out some interesting files of this company. In addition to developments ( 1冠脉产品研发部 ) We will publish terabytes of various data from European and Chinese servers ... |
|||||
| Ransomware | ASIC Soluciones id7135 View details | Communication / Marketing | — | ||
|
ASIC is an IT solutions company that provides data, analytics and artificial intelligence services. The data dump is provided below for your review. |
|||||
| Ransomware | Daiwa House Industry Co. id6993 View details | Japan | Retail / E-commerce | — | |
|
Daiwa House Industry Co., Ltd. is Japan's largest homebuilder, specializing in prefabricated houses. The company is also engaged in the construction of factories, shopping centers, health care facilities, the management and operation of resor ... |
|||||
| Ransomware | Printmarksolution id6931 View details | Communication / Marketing | — | ||
|
Distributor of production date, expiry date, barcode, lot number, quality products imported from Europe by a team of professionals with more than 15 years of experience in industrial printing. we are committed to providing quality service, at ... |
|||||
| Ransomware | ASZ GmbH & Co id6880 View details | Germany | Services | — | |
|
The object of the company is the acquisition and management of shareholdings in service companies on the basis of the Occupational Safety Act and the Occupational Safety Act, as well as the assumption of personal liability and management in t ... |
|||||
| Ransomware | iECM Company Limited id6856 View details | Thailand | Manufacturing / Engineering | — | |
|
iECM Company Limited is one of the leading firm of Engineering and Consultancy Services in Thailand. Our company is proud of its successful record of the achievements, which bring its stock of experience, know-how, capabilities to bear when f ... |
|||||
| Ransomware | Del Bono Hotel id6793 View details | Argentina | Hospitality / Food & Beverage / Tourism | — | |
|
Del Bono Hotels, the most important chain of hotels with function rooms for events, in San Juan Argentina. The data taken from the company's servers is shown below. |
|||||
| Ransomware | Clarity Water Technologies, LLC id6785 View details | United States | IT | ||
|
Clarity Water Technologies specializes in comprehensive industrial and commercial water treatment that includes expert consulting and cutting-edge chemistry, as well as a full service team to support facility needs . Some of the data take ... |
|||||
| Ransomware | AWM Global Advisors id6781 View details | Communication / Marketing | |||
|
AWM offers security backed loans and margin account lending at very competitive rates. You'll soon see for yourself how much these guys care about the privacy of their customers and employees. |
|||||
| Ransomware | Ascentia Group Pty Ltd id6727 View details | United States | Construction / Real Estate | — | |
|
Ascentia is a independent Civil Engineering Contracting company that services the Defence, Civil Infrastructure Construction and the Oil & Gas Industries. The data taken from the company's servers is shown below. |
|||||
| Ransomware | Conley & Wirick, P.A. id6724 View details | Finance / Legal / Insurance | |||
|
Conley & Wirick, P.A. has served the communities of Bath and Midcoast Maine for more than forty years, and today our attorneys are still committed to serving the people of our community and solving their problems. Lawyers always like to th ... |
|||||
| Ransomware | SMDEA id6509 View details | France | Public Sector | ||
|
The SMDEA, a public operator, is an intermunicipal cooperation tool specializing in the areas of water and sanitation; domestic cycle and large cycle. The company decided to ignore the gigabytes of data taken from their servers. That's wh ... |
|||||
| Ransomware | Oppida Estates Limited id6508 View details | Construction / Real Estate | |||
|
Oppida is a real estate agency that provides a wide range of modern spaces and apartment complexes for rent and sale. The data of ordinary and wealthy (very) customers you will be able to observe in the very near future. By the way person ... |
|||||
| Ransomware | Kannangara Thomson id6476 View details | New Zealand | Finance / Legal / Insurance | — | |
|
Christchurch Lawyers, Kannangara Thomson provides advice on the law and a full range of legal services including family law, employment law and conveyancing Some of this company's data will be uploaded shortly. All the personal data of th ... |
|||||
| Ransomware | Maier Sanitär-Technik GmbH id6475 View details | Germany | IT | — | |
|
Maier sanitary technology GmbH is mentioned in public sources in the context of the following products and services. Customer service, hall construction and heating technology are the most common. Some of this company's data will be uploa ... |
|||||
| Ransomware | HECTOR MARTINEZ SOSA Y CIA SA id6470 View details | Finance / Legal / Insurance | — | ||
|
HMSOSA is a group of companies in the insurance industry, responding to all the needs of individuals, companies and organizations, public and private. We have our own offices in CABA, Rio Grande, Ushuaia, Rio Gallegos, Vicente Lopez and Mar d ... |
|||||
| Ransomware | Dialog Information Technology id6349 View details | Australia | IT | ||
|
Dialog Information Technology is one of Australia's leading technology services organisations trading nationally from offices in Brisbane, Sydney, Canberra, Melbourne, Adelaide, Perth and Darwin. Established in 1979, Dialog employs over 1,200 ... |
|||||
| Ransomware | Robert Bernard id6348 View details | Retail / E-commerce | |||
|
Since its founding in 1950, Robert Bernard Pneus et Mécanique has become one of the largest tire retailers in Quebec. Thanks to our solid distribution network, we are able to serve our customers throughout Quebec. It's time to showcase what ... |
|||||
| Ransomware | Contempo Card id6347 View details | Manufacturing / Engineering | |||
|
Vark Sr worked with his father in the jewelry manufacturing business in Rhode Island. In the 80’s, Providence, RI was the jewelry capital of the world, and everyone wanted a piece of the jewelry pie. Vark Sr noticed something odd: while the ... |
|||||
| Ransomware | Lojas Torra id6346 View details | Brazil | Communication / Marketing | ||
|
Lojas Torra is a fashion retailer that provides fashion accessories and products. We have all the data of customers and employees and we are ready to share them with you... |
|||||
| Ransomware | Emtelco id6345 View details | Colombia | Services | ||
|
EMTELCO SA is a company that operates in the Outsourcing/Offshoring industry. It employs 101-250 people and has $25M-$50M of revenue. We also have several hundred gigabytes of data. Data of all large clients (corporate), non-disclosure docume ... |
|||||
| Ransomware | fsmsolicitors.co.uk id6344 View details | United Kingdom | Other | ||
|
DB Backups: FSM_backup Isokon2_backup Isokon2CGT_backup Partner_backup PartnerTCDatabase_backup TCDatabase_backup Dept_data - internal data including accounts, commercial information, ligitation etc. Isocon documents Client's data ... |
|||||
| Ransomware | eyeDOCS Ottawa id6341 View details | Other | |||
|
The company has decided not to care about its customers' data. Therefore, we are forced to publish their data. You can download the first part at the link below pass for archive: ys5YHSpkbp;sYT5&^%,FPERLHP |
|||||
| Ransomware | Gropper & Nejat, PLLC id6329 View details | Services | |||
|
Another company that decided it was a good idea to ignore our team. We will now post their customer data in pieces. Pass for archive: moR~?HHJ%IqTymMH7XHv$o7fi |
|||||
| Ransomware | SIIX Corporation id6295 View details | Japan | Services | ||
|
In 3 days we will publish all the data taken from their servers. |
|||||
| Ransomware | Sippex id6108 View details | Other | |||
|
Another company that does not care about the data of its employees and customers at all. Publishing another leak |
|||||
| Ransomware | Attent Zorg en Behandeling id5556 View details | Netherlands | Telecommunications | ||
|
Dear friends decided to deceive us and their customers, saying that everything works fine for them and there were no serious leaks in the network. https://www.attentzorgenbehandeling.nl/nieuws/update-ongeautoriseerde-toegang-it-systemen W ... |
|||||
| Ransomware | GIGATRON.RS id5495 View details | Serbia | Retail / E-commerce | ||
|
Gigatron downloaded data overview: From 172.31.244.50: DB backups of shops: G1-G69, G88, G89 From 172.31.248.10: DB backups: CTRetail_backup CTRetailWSRepl_backup GigatronWMS_Sync_backup From 192.168.2.144: employee disability ... |
|||||
| Ransomware | scinopharm.com id4305 View details | Other | — | ||
|
No additional victim description available. |
|||||