Ransomware Group intelligence
Qilin
ActiveTrack Qilin with 2263 published victims and 5 known leak locations in a single intelligence view.
Overview
Qilin is tracked by Breach House as a ransomware group with 2263 published victims.
United States is currently the most targeted country in this dataset.
5 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (5)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion |
| Leak location 2 | Onion service | Unknown | kbsqoivihgdmwczmxkbovk7ss2dcynitwhhfu5yw725dboqo5kthfaad.onion |
| Leak location 3 | Onion service | Unknown | ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion |
| Leak location 4 | Onion service | Unknown | b4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion |
| Leak location 5 | Onion service | Unknown | ji57fr53anp7wb44tbbnp72qcgbhqywy4jmbncawdcrejj5amuvh3zqd.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (2263)
Search, filter and paginate the victim timeline for Qilin. Showing 201–300 of 2263.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | Allied Plumbing & Heating id30498 View details | NH | Energy | ||
|
Allied PNH is an energy company based in New Hampshire, operating in the energy sector. The company provides various energy-related services to its customers. Allied PNH was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Allied Plumbing & Heating id30498 View details | NH | Energy | ||
|
N/A |
|||||
| Ransomware | Eurodefi id30463 View details | France | Finance / Legal / Insurance | ||
|
Eurodefis is a financial services company based in France, operating in the finance, legal, and insurance sector. The company provides financial solutions and services to its clients. Eurodefis was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Eurodefi id30463 View details | Morocco | Finance / Legal / Insurance | ||
|
N/A |
|||||
| Ransomware | Hilo id30418 View details | Colombia | IT | ||
|
Hilo.com is an IT company based in Colombia, providing various IT services. The company operates in the IT sector, offering services to clients in the country. Hilo.com was listed as a ransomware victim associated with Qilin. |
|||||
| Ransomware | Hilo id30418 View details | Colombia | IT | ||
|
N/A |
|||||
| Ransomware | Promotora Zacapu id30419 View details | Mexico | Transportation / Travel / Logistics | ||
|
Promotorazacapu is a company based in Mexico, operating in the transportation, travel, and logistics sector. The company likely provides services such as freight transportation, travel arrangements, and logistics management to its clients. Promotorazacapu was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Promotora Zacapu id30419 View details | Mexico | Transportation / Travel / Logistics | ||
|
N/A |
|||||
| Ransomware | Navana Real Estate id30420 View details | United Arab Emirates | Construction / Real Estate | ||
|
Navana Real Estate is a company operating in the construction and real estate sector, based in the United Arab Emirates. The company likely offers various services related to property development, sales, and management. Navana Real Estate is listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Navana Real Estate id30420 View details | United Arab Emirates | Construction / Real Estate | ||
|
N/A |
|||||
| Ransomware | SPACElogic id30412 View details | Singapore | Construction / Real Estate | ||
|
Spacelogic is a Singapore-based company operating in the construction and real estate sector, providing various services to clients. The company is involved in development and management of properties. Spacelogic was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | SPACElogic id30412 View details | Singapore | Construction / Real Estate | ||
|
N/A |
|||||
| Ransomware | Global Strategic Business Process Solutions id30413 View details | United States | Finance / Legal / Insurance | ||
|
Globalstrategic.com is a US-based company operating in the finance, legal, and insurance sectors, providing various services to its clients. The company's offerings cater to the needs of its customers in these sectors. Globalstrategic.com was listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | Global Strategic Business Process Solutions id30413 View details | United States | Finance / Legal / Insurance | ||
|
N/A |
|||||
| Ransomware | CRZ Construcciones id30414 View details | Argentina | Construction / Real Estate | ||
|
CRZ Construcciones is a construction and real estate company based in Argentina, providing various services to the sector. The company operates in the Argentine market, offering construction and real estate solutions. CRZ Construcciones was listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | CRZ Construcciones id30414 View details | Argentina | Construction / Real Estate | ||
|
N/A |
|||||
| Ransomware | Red Planet Hotels id30415 View details | Philippines | Hospitality / Food & Beverage / Tourism | ||
|
Red Planet Hotels is a hotel chain operating in the Philippines, offering accommodations and services to the tourism and food and beverage sector. The company provides a range of amenities and experiences to its guests. Red Planet Hotels was listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | Red Planet Hotels id30415 View details | Philippines | Hospitality / Food & Beverage / Tourism | ||
|
N/A |
|||||
| Ransomware | Inter Power Engineering id30378 View details | United Arab Emirates | Manufacturing / Engineering | ||
|
Interpower Engrg is a company based in the United Arab Emirates, operating in the manufacturing and engineering sector. The company likely provides engineering services and solutions to its clients. It was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Inter Power Engineering id30378 View details | United Arab Emirates | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | Sintax id30372 View details | Belgium | IT | ||
|
Sintax.be is an IT company based in Belgium, providing various IT services. The company operates in the IT sector, offering solutions to its clients. Sintax.be was listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | Sintax id30372 View details | Belgium | IT | ||
|
N/A |
|||||
| Ransomware | Sun Dolphin Boats id30373 View details | United States | Manufacturing / Engineering | ||
|
Sundolphin is a US-based company operating in the manufacturing and engineering sector, offering various products and services. The company is involved in the design, development, and production of goods. Sundolphin was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Sun Dolphin Boats id30373 View details | United States | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | Bronken's Dist id30374 View details | Other | |||
|
Bronkens.com is a website operating in the other sector. The entity provides various offerings, but specific details are not publicly available. Bronkens.com was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Bronken's Dist id30374 View details | Other | |||
|
N/A |
|||||
| Ransomware | Alan F Burke id30375 View details | United States | Finance / Legal / Insurance | ||
|
Alan Burke CPA is a certified public accounting firm based in the United States, operating in the finance sector. The company provides various financial services, including accounting, tax preparation, and consulting. Alan Burke CPA was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Alan F Burke id30375 View details | United States | Finance / Legal / Insurance | ||
|
N/A |
|||||
| Ransomware | Hum & Jacoby id30369 View details | United States | Finance / Legal / Insurance | ||
|
HHJCPAs is a US-based accounting firm operating in the finance and legal sector, providing various financial services to its clients. The company is located in the United States and offers services such as auditing, tax preparation, and financial planning to individuals and businesses. HHJCPAs was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Hum & Jacoby id30369 View details | United States | Finance / Legal / Insurance | ||
|
N/A |
|||||
| Ransomware | Peligro Sports id30362 View details | United States | Retail / E-commerce | ||
|
Peligrosportsnyc is an e-commerce company based in the US, operating in the retail sector. The company offers various products online, catering to customers in the US. Peligrosportsnyc was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Peligro Sports id30362 View details | United States | Retail / E-commerce | ||
|
N/A |
|||||
| Ransomware | S.J. Louis id30361 View details | Brazil | Construction / Real Estate | ||
|
Sjlouis.com is a company operating in the construction and real estate sector in Brazil, providing various services to its clients. The company is involved in development and management of properties. Sjlouis.com was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | S.J. Louis id30361 View details | Brazil | Construction / Real Estate | ||
|
N/A |
|||||
| Ransomware | Lechner Massivhaus GmbH id30346 View details | Austria | Construction / Real Estate | ||
|
Lechner Massivhaus is a construction company based in Austria, operating in the real estate sector, offering various services related to building and construction. The company is involved in the development and construction of residential and commercial properties. Lechner Massivhaus was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Lechner Massivhaus GmbH id30346 View details | Austria | Construction / Real Estate | ||
|
N/A |
|||||
| Ransomware | COP® Vertriebs-GmbH Zentrale id30349 View details | Germany | Manufacturing / Engineering | ||
|
Cop GmbH is a German company operating in the manufacturing and engineering sector, providing various services and products to its clients. The company is based in Germany and offers solutions tailored to the needs of its customers. Cop GmbH was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | COP® Vertriebs-GmbH Zentrale id30349 View details | Germany | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | Next Clinics id30324 View details | Czechia | Healthcare / Medicine | ||
|
Next Clinics is a healthcare provider based in the Czech Republic, offering medical services to patients. The company operates in the healthcare sector, providing various medical treatments and care. Next Clinics was listed as a ransomware victim associated with Qilin. |
|||||
| Ransomware | Next Clinics id30324 View details | Czechia | Healthcare / Medicine | ||
|
N/A |
|||||
| Ransomware | Accelirate id30321 View details | United States | IT | ||
|
Accelirate is a US-based company operating in the IT sector, providing various technology solutions. As an IT sector company, Accelirate offers services to support businesses in their technology needs. Accelirate was listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | Accelirate id30321 View details | United States | IT | ||
|
N/A |
|||||
| Ransomware | Keystone Homes id30291 View details | United States | IT | ||
|
Gokeystone is an IT company based in the United States, providing various services within the IT sector. As a US-based entity, Gokeystone operates within the country's IT industry, offering its expertise and solutions to clients. Gokeystone was listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | Keystone Homes id30291 View details | United States | IT | ||
|
N/A |
|||||
| Ransomware | Precision Steel Services id30292 View details | Manufacturing / Engineering | |||
|
Precision Steel is a company operating in the manufacturing and engineering sector. The company likely provides steel products and services to various industries. Precision Steel was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Precision Steel Services id30292 View details | Manufacturing / Engineering | |||
|
N/A |
|||||
| Ransomware | Answer Precision Tool id30293 View details | United States | IT | ||
|
AnswerPrecision is an IT company based in the US, providing services in the information technology sector. The company operates in the US, offering various IT solutions. AnswerPrecision was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Answer Precision Tool id30293 View details | United States | IT | ||
|
N/A |
|||||
| Ransomware | Wood Ellis & Wood CPA id30289 View details | United States | Finance / Legal / Insurance | ||
|
Woodell Ellis Wood CPA is a certified public accounting firm based in the United States, operating within the finance, legal, and insurance sector. The company provides various financial services to its clients. Woodell Ellis Wood CPA was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Wood Ellis & Wood CPA id30289 View details | United States | Finance / Legal / Insurance | ||
|
N/A |
|||||
| Ransomware | Max Fordham id30284 View details | United Kingdom | Construction / Real Estate | ||
|
Maxfordham is a UK-based company operating in the construction and real estate sector, providing various services to clients. The company is involved in projects across the country, offering expertise in construction and property development. Maxfordham was listed as a ransomware victim associated with Qilin. |
|||||
| Ransomware | Max Fordham id30284 View details | United Kingdom | Construction / Real Estate | ||
|
N/A |
|||||
| Ransomware | Grupo Inteca id30285 View details | Mexico | IT | ||
|
Grupointeca.com is an IT company based in Mexico, offering various services within the information technology sector. The company operates in a critical industry, providing essential services to its clients. Grupointeca.com was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Grupo Inteca id30285 View details | Mexico | IT | ||
|
N/A |
|||||
| Ransomware | LabelDaddy id30282 View details | United States | Retail / E-commerce | ||
|
Labeldaddy.com is an e-commerce company based in the United States, operating in the retail sector, and offering various products. The company provides online shopping experiences for its customers. Labeldaddy.com was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | LabelDaddy id30282 View details | United States | Retail / E-commerce | ||
|
N/A |
|||||
| Ransomware | TQ Financial Services id30245 View details | United States | Finance / Legal / Insurance | ||
|
TQ Financials operates in the finance sector in the United States, providing financial services. The company is part of the broader financial, legal, and insurance sector, offering various financial solutions. TQ Financials was listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | TQ Financial Services id30245 View details | United States | Finance / Legal / Insurance | ||
|
N/A |
|||||
| Ransomware | Md Lewis id30246 View details | United States | Finance / Legal / Insurance | ||
|
MD Lewis CPA is a US-based certified public accounting firm operating in the finance, legal, and insurance sector. The company provides various financial services to its clients. MD Lewis CPA was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Md Lewis id30246 View details | United States | Finance / Legal / Insurance | ||
|
N/A |
|||||
| Ransomware | Goodwill Manasota id30247 View details | United States | NGOs / Associations | ||
|
Experience Goodwill is a US-based non-governmental organization operating in the sector of associations. It provides various services and support to communities. Experience Goodwill is involved in charitable activities and aims to make a positive impact. It was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Goodwill Manasota id30247 View details | United States | NGOs / Associations | ||
|
N/A |
|||||
| Ransomware | Sitmatic id30248 View details | Germany | IT | ||
|
Sitmatic is an IT company based in Germany, providing various IT services. The company operates in the IT sector, offering solutions to its clients. Sitmatic was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Sitmatic id30248 View details | Germany | IT | ||
|
N/A |
|||||
| Ransomware | Sisint id30249 View details | Portugal | IT | ||
|
Sisint.pt is a Portuguese IT company providing various services in the information technology sector. Located in Portugal, the company operates in the IT industry, offering a range of solutions. Sisint.pt was listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | Sisint id30249 View details | Portugal | IT | ||
|
N/A |
|||||
| Ransomware | Pennant Hills Golf Club id30224 View details | Australia | Hospitality / Food & Beverage / Tourism | ||
|
Pennanthills Golf Club is a golf club located in Australia, operating in the hospitality and tourism sector, offering golfing facilities and related services. The club is situated in a region known for its natural beauty and recreational activities. Pennanthills Golf Club was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Pennant Hills Golf Club id30224 View details | Australia | Hospitality / Food & Beverage / Tourism | ||
|
N/A |
|||||
| Ransomware | Dennis Waters Rental Properties id30151 View details | United Kingdom | Construction / Real Estate | ||
|
Dennis Waters Rental Properties is a company operating in the construction and real estate sector, based in the United Kingdom. The company likely provides rental properties and related services to clients. Dennis Waters Rental Properties was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Dennis Waters Rental Properties id30151 View details | United Kingdom | Construction / Real Estate | ||
|
N/A |
|||||
| Ransomware | Mattatuck Industrial Scrap Metal id30152 View details | United States | Manufacturing / Engineering | ||
|
Mattatuck Scrap is a manufacturing and engineering company based in the United States. The company operates in the metal recycling sector, providing various services related to scrap metal processing. Mattatuck Scrap was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Mattatuck Industrial Scrap Metal id30152 View details | United States | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | Laughlin Nunnally Hood & Crum id30153 View details | United States | Finance / Legal / Insurance | ||
|
Greenevillelaw is a law firm based in the United States, operating in the finance and legal sector. The firm provides legal services to clients in various areas of law. Greenevillelaw was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Laughlin Nunnally Hood & Crum id30153 View details | United States | Finance / Legal / Insurance | ||
|
N/A |
|||||
| Ransomware | Rossum Integration id30154 View details | Slovakia | IT | ||
|
Rossum.sk is an IT company based in Slovakia, providing various IT services. The company operates in the IT sector, offering solutions to its clients. Rossum.sk was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Rossum Integration id30154 View details | Slovakia | IT | ||
|
N/A |
|||||
| Ransomware | Dynamic Laser Solutions Ltd. id30155 View details | United Kingdom | Manufacturing / Engineering | ||
|
Dynamic Laser Solutions is a company operating in the manufacturing and engineering sector, based in the United Kingdom. The company likely provides specialized laser solutions and services to its clients. Dynamic Laser Solutions was listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | Dynamic Laser Solutions Ltd. id30155 View details | United Kingdom | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | Dixie Beverage id30156 View details | United States | Retail / E-commerce | ||
|
Dixie Beverage is a US-based company operating in the retail and e-commerce sector, offering various products to its customers. The company is involved in the beverage industry, providing a range of drinks and related services. Dixie Beverage was listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | Dixie Beverage id30156 View details | United States | Retail / E-commerce | ||
|
N/A |
|||||
| Ransomware | Chamco id30121 View details | United States | Other | ||
|
Chamco is a US-based company operating in the other sector, providing various offerings. The company is located in the United States and serves its customers with different services. Chamco was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Chamco id30121 View details | United States | Other | ||
|
N/A |
|||||
| Ransomware | Hemmersbach GmbH & Co. KG id30122 View details | Germany | IT | ||
|
Hemmersbach is a Germany-based IT services provider that offers a range of solutions to its clients. The company operates in the IT sector, providing various services to its customers. Hemmersbach is listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | Hemmersbach GmbH & Co. KG id30122 View details | Germany | IT | ||
|
N/A |
|||||
| Ransomware | Kunert Fashion id30104 View details | Germany | Manufacturing / Engineering | ||
|
Kunert.de is a German company operating in the manufacturing and engineering sector, providing various products and services. The company is based in Germany and serves clients in its respective industry. Kunert.de was listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | Kunert Fashion id30104 View details | Germany | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | Musashino University id30101 View details | Japan | Education | ||
|
Musashino University is a higher education institution located in Japan, offering various academic programs to students. The university is situated in the Tokyo metropolitan area and provides education in multiple fields. Musashino University was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Musashino University id30101 View details | Japan | Education | ||
|
N/A |
|||||
| Ransomware | KALIACT ANCHETA et Associs id30103 View details | France | Finance / Legal / Insurance | ||
|
Ancheta Associes is a French company operating in the finance, legal, and insurance sector, providing various services to clients. The company is based in France and offers expertise in financial and legal matters. Ancheta Associes was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | KALIACT ANCHETA et Associs id30103 View details | France | Finance / Legal / Insurance | ||
|
N/A |
|||||
| Ransomware | Metal Sur Famin id30098 View details | Argentina | Manufacturing / Engineering | ||
|
Metalsurfamin is a company based in Argentina, operating in the manufacturing and engineering sector. The company likely provides various services and products related to metal surfacing and manufacturing. Metalsurfamin is listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Metal Sur Famin id30098 View details | Argentina | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | Lam Soon id30092 View details | Thailand | Manufacturing / Engineering | ||
|
Lamsoon is a company based in Thailand, operating in the manufacturing and engineering sector. The company likely provides various products and services related to its sector. Lamsoon was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Lam Soon id30092 View details | Thailand | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | Bristol Place id30093 View details | United Kingdom | Construction / Real Estate | ||
|
Bristolplace.net operates in the construction and real estate sector, providing services in the United Kingdom. The company is involved in various aspects of the industry, including development and management of properties. Bristolplace.net was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Bristol Place id30093 View details | United Kingdom | Construction / Real Estate | ||
|
N/A |
|||||
| Ransomware | Gsma id30094 View details | United Kingdom | Construction / Real Estate | ||
|
GSM Architects is a construction and real estate company based in the United Kingdom, providing architectural services to clients in the sector. The company operates in the GB region, offering various services related to construction and real estate development. GSM Architects is listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | Gsma id30094 View details | United Kingdom | Construction / Real Estate | ||
|
N/A |
|||||
| Ransomware | Axionlog id30081 View details | Czechia | Transportation / Travel / Logistics | ||
|
Axionlog operates in the transportation, travel, and logistics sector, providing services in the Czech Republic. The company's offerings cater to the needs of the logistics and transportation industry. Axionlog was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Axionlog id30081 View details | Czechia | Transportation / Travel / Logistics | ||
|
N/A |
|||||