Ransomware Group intelligence
Qilin
ActiveTrack Qilin with 2209 published victims and 5 known leak locations in a single intelligence view.
Overview
Qilin is tracked by Breach House as a ransomware group with 2209 published victims.
United States is currently the most targeted country in this dataset.
5 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (5)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion |
| Leak location 2 | Onion service | Unknown | kbsqoivihgdmwczmxkbovk7ss2dcynitwhhfu5yw725dboqo5kthfaad.onion |
| Leak location 3 | Onion service | Unknown | ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion |
| Leak location 4 | Onion service | Unknown | b4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion |
| Leak location 5 | Onion service | Unknown | ji57fr53anp7wb44tbbnp72qcgbhqywy4jmbncawdcrejj5amuvh3zqd.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (2209)
Search, filter and paginate the victim timeline for Qilin. Showing 901–1000 of 2209.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | Farmacia San Pablo id25261 View details | Mexico | Agriculture / Food | ||
|
No additional victim description available. |
|||||
| Ransomware | Jing Cheng Enterprise Co., Ltd. id25260 View details | Taiwan, Province of China | Communication / Marketing | ||
|
No additional victim description available. |
|||||
| Ransomware | Sai Oral SurgeryOral id25259 View details | United States | Healthcare / Pharma | ||
|
No additional victim description available. |
|||||
| Ransomware | mdm®NT id25258 View details | Poland | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | McKenzie SewOn id25257 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Röben Tonbaustoffe id25256 View details | Germany | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | NECO Equipment id25255 View details | Taiwan, Province of China | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | сj Global id25254 View details | United States | Retail / E-commerce | ||
|
No additional victim description available. |
|||||
| Ransomware | Csv Group id25245 View details | Italy | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | Sugawara Laboratories id25244 View details | Japan | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | KOPA Kozmetik A id25242 View details | Türkiye | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Luminex Software id25241 View details | United States | IT | ||
|
No additional victim description available. |
|||||
| Ransomware | BNZ Materials id25234 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Z-Tronix id25232 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Quasar id25231 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | TaLachaim id25230 View details | Israel | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Auforum AG id25224 View details | Switzerland | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | SEACSUB S.p.a. id25199 View details | Italy | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Grupo Hafesa id25194 View details | Spain | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Sintac Recycling id25193 View details | Spain | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Willowdale Steeplechase id25191 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Questica id25184 View details | Canada | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Seac id25183 View details | Italy | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Goodwin College id25182 View details | United States | Education | ||
|
No additional victim description available. |
|||||
| Ransomware | Atalian id25175 View details | France | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Typhoo Tea id25162 View details | United Kingdom | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Dom Development id25161 View details | Poland | IT | ||
|
No additional victim description available. |
|||||
| Ransomware | Hometech Window id25156 View details | United States | IT | ||
|
No additional victim description available. |
|||||
| Ransomware | Georgia Dermatology & Skin Cancer Center id25155 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Ortho Mattress id25154 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Hopital La Rabta id25153 View details | Tunisia | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Bangchak Corporation id25093 View details | Thailand | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | Madera County Superintendent of Schools id25089 View details | United States | Education | ||
|
No additional victim description available. |
|||||
| Ransomware | Lynn Electrical id25086 View details | New Zealand | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | SEIMITSU THAI COMPANY LIMITED id25085 View details | Thailand | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | ARO id25066 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Happy Telecom id25065 View details | United Kingdom | Telecommunications | ||
|
No additional victim description available. |
|||||
| Ransomware | Felix Gonzalez Law Firm id25064 View details | United States | Finance / Legal / Insurance | ||
|
No additional victim description available. |
|||||
| Ransomware | LogicVein id25063 View details | Japan | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | SV-Büro Ing. Schulz GmbH id25062 View details | Germany | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Sipl id25061 View details | India | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Niradia Enterprises id25046 View details | India | Communication / Marketing | ||
|
No additional victim description available. |
|||||
| Ransomware | daispa.it id25045 View details | Italy | Telecommunications | ||
|
No additional victim description available. |
|||||
| Ransomware | SW/WC Service Cooperative id25044 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | CoreHQ id25043 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Shore Gardens Rehabilitation & Nursing Center id25042 View details | United States | Healthcare / Pharma | ||
|
No additional victim description available. |
|||||
| Ransomware | The Sonnenschein Groupe id25041 View details | United States | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | Jaf Gifts id25040 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Eastern Townships School Board id25039 View details | Canada | Education | ||
|
No additional victim description available. |
|||||
| Ransomware | Universiti Sains Islam Malaysia id25038 View details | Malaysia | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | loginport id25037 View details | Netherlands | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Grupo Amanus id25013 View details | Mexico | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Acme Electric id25012 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Scenic Solutions id25011 View details | United States | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | Besco Electrical id25010 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | National Biscuit Industries id25009 View details | Oman | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Callipo Group id25008 View details | Italy | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | Lasercomb id25007 View details | Germany | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | cc-estuaire id25004 View details | France | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | GIV SRL id25003 View details | Italy | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | GOOD+ Foundation id25002 View details | United States | NGOs / Associations | ||
|
No additional victim description available. |
|||||
| Ransomware | Hongfa America id25001 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Eanes ISD schools id25000 View details | United States | Education | ||
|
No additional victim description available. |
|||||
| Ransomware | La Papelera id24999 View details | Bolivia, Plurinational State of | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Lugiano Medical id24998 View details | United States | Healthcare / Pharma | ||
|
No additional victim description available. |
|||||
| Ransomware | Fürth id24997 View details | Germany | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Grupo Olé id24985 View details | Spain | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Cedar Valley Services id24982 View details | United States | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | Busbusbus id24974 View details | Canada | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Titan Motor Group id24973 View details | United States | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | Dolan Construction id24972 View details | United States | Construction / Real Estate | ||
|
No additional victim description available. |
|||||
| Ransomware | Egp Comunicaciones Sac id24971 View details | Peru | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Victoria Benelux id24970 View details | Belgium | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | IAPMO id24969 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Integrated Technology Group id24968 View details | Jordan | IT | ||
|
No additional victim description available. |
|||||
| Ransomware | Fujitsu Component (Malaysia) SDN. BHD id24963 View details | Malaysia | Manufacturing / Engineering | ||
|
No additional victim description available. |
|||||
| Ransomware | Rio supermarket id24962 View details | Venezuela, Bolivarian Republic of | Retail / E-commerce | ||
|
No additional victim description available. |
|||||
| Ransomware | Publicidad Sarmiento id24938 View details | Argentina | Public Sector | ||
|
No additional victim description available. |
|||||
| Ransomware | Melsing id24926 View details | Denmark | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | The Genesis Group id24916 View details | United States | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | Maison Law id24915 View details | United States | Finance / Legal / Insurance | ||
|
No additional victim description available. |
|||||
| Ransomware | Club Atlético River Plate id24913 View details | Argentina | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Josh Steel id24909 View details | United States | Manufacturing / Engineering | ||
|
No additional victim description available. |
|||||
| Ransomware | Shah Law Office id24908 View details | Canada | Finance / Legal / Insurance | ||
|
No additional victim description available. |
|||||
| Ransomware | MG Chartered Professional Accountant id24907 View details | Canada | Communication / Marketing | ||
|
No additional victim description available. |
|||||
| Ransomware | Tlechaim id24891 View details | Israel | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Grandes Vinos id24887 View details | Spain | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Telechaim id24883 View details | Israel | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Best Hotels Spain id24882 View details | Spain | Hospitality / Food & Beverage / Tourism | ||
|
No additional victim description available. |
|||||
| Ransomware | PODOVIA id24864 View details | Poland | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Ferreteria Scopazzo id24853 View details | Argentina | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Pueblo West Colorado id24852 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Eurofret Transports Et Logistique id24851 View details | France | Transportation / Travel / Logistics | ||
|
No additional victim description available. |
|||||
| Ransomware | Hr Björkmans Entrémattor id24850 View details | Sweden | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Capital + Safi id24849 View details | France | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Ciif id24848 View details | Philippines | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Grupo Logistics id24797 View details | Mexico | Transportation / Travel / Logistics | ||
|
No additional victim description available. |
|||||
| Ransomware | Merko Ehitus id24796 View details | Estonia | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Dacon Networks id24795 View details | Singapore | Telecommunications | ||
|
No additional victim description available. |
|||||
| Ransomware | Region of Istria id24794 View details | Croatia | Other | ||
|
No additional victim description available. |
|||||