Ransomware Group intelligence
Qilin
ActiveTrack Qilin with 2209 published victims and 5 known leak locations in a single intelligence view.
Overview
Qilin is tracked by Breach House as a ransomware group with 2209 published victims.
United States is currently the most targeted country in this dataset.
5 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (5)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion |
| Leak location 2 | Onion service | Unknown | kbsqoivihgdmwczmxkbovk7ss2dcynitwhhfu5yw725dboqo5kthfaad.onion |
| Leak location 3 | Onion service | Unknown | ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion |
| Leak location 4 | Onion service | Unknown | b4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion |
| Leak location 5 | Onion service | Unknown | ji57fr53anp7wb44tbbnp72qcgbhqywy4jmbncawdcrejj5amuvh3zqd.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (2209)
Search, filter and paginate the victim timeline for Qilin. Showing 101–200 of 2209.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | KLD Labs id30662 View details | United States | IT | ||
|
KLD Labs is an IT company based in the United States, providing various services and solutions within the IT sector. The company operates in a competitive market, offering its expertise to clients. KLD Labs was listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | KLD Labs id30662 View details | United States | IT | ||
|
N/A |
|||||
| Ransomware | Armara id30663 View details | France | Retail / E-commerce | ||
|
Armara.fr operates in the retail and e-commerce sector, offering various products and services to customers in France. As an e-commerce company, it provides online shopping experiences, catering to the needs of its customers. Armara.fr was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Armara id30663 View details | France | Retail / E-commerce | ||
|
N/A |
|||||
| Ransomware | AK Preparedness id30659 View details | United States | Retail / E-commerce | ||
|
Akpreparedness.com is an e-commerce website based in the United States, operating in the retail sector. The site likely offers various products for sale online, catering to customers across the country. As a retail e-commerce site, it provides a platform for customers to browse and purchase products. Akpreparedness.com was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | AK Preparedness id30659 View details | United States | Retail / E-commerce | ||
|
N/A |
|||||
| Ransomware | Powder River Heating & Air Conditioning id30649 View details | United States | Construction / Real Estate | ||
|
Powderriverheating.com is a company operating in the construction and real estate sector in the United States. The company likely provides heating services, given its name. It was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Powder River Heating & Air Conditioning id30649 View details | United States | Construction / Real Estate | ||
|
N/A |
|||||
| Ransomware | Droguería Martorani id30650 View details | Argentina | Retail / E-commerce | ||
|
Martorani is an Argentine company operating in the retail and e-commerce sector, offering various products and services to its customers. The company is based in Argentina and caters to the local market with its online presence at www.martorani.com. Martorani is listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Droguería Martorani id30650 View details | Argentina | Retail / E-commerce | ||
|
N/A |
|||||
| Ransomware | Cafar id30645 View details | Argentina | NGOs / Associations | ||
|
CAFAR, or Camara Argentina de Fertilizantes y Agroquimicos Responsables, is an Argentine association that represents the fertilizer and agrochemical industry in Argentina. The organization provides various services and resources to its members, including training, advocacy, and networking opportunities. CAFAR operates in the non-governmental organization sector, focusing on promoting responsible practices in the agrochemical industry. It was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Cafar id30645 View details | Argentina | NGOs / Associations | ||
|
N/A |
|||||
| Ransomware | Acosol id30642 View details | Spain | Energy | ||
|
Acosol es is a Spanish company operating in the energy sector, providing various services to its customers. Located in Spain, the company is involved in energy-related activities. Acosol es was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Acosol id30642 View details | Spain | Energy | ||
|
N/A |
|||||
| Ransomware | International Delights id30585 View details | United States | Retail / E-commerce | ||
|
Intdelights.com operates in the retail and e-commerce sector, offering various products to customers in the United States. As an online retailer, intdelights.com provides a platform for customers to browse and purchase products. Intdelights.com was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | International Delights id30585 View details | United States | Retail / E-commerce | ||
|
N/A |
|||||
| Ransomware | Feliubadaló id30571 View details | Spain | Other | ||
|
Feliubadalo is an entity based in Spain, operating in the other sector. The entity's offerings and services are not well-documented. Feliubadalo was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Feliubadaló id30571 View details | Spain | Other | ||
|
N/A |
|||||
| Ransomware | Levin Furniture id30570 View details | United States | Retail / E-commerce | ||
|
Levin Furniture is a US-based retail and e-commerce company that offers a range of furniture products. The company operates in the retail and e-commerce sector, providing customers with various furniture options. It was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Levin Furniture id30570 View details | United States | Retail / E-commerce | ||
|
N/A |
|||||
| Ransomware | THL id30556 View details | Finland | Finance / Legal / Insurance | ||
|
THL is a Finnish organization operating in the finance, legal, and insurance sectors. The entity provides various services to its clients in Finland. THL was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | THL id30556 View details | Finland | Finance / Legal / Insurance | ||
|
N/A |
|||||
| Ransomware | Sedemi id30538 View details | Mexico | IT | ||
|
Sedemi is an IT company based in Mexico, providing various services to its clients. The company operates in the IT sector, offering solutions to businesses in Mexico. Sedemi is listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | Sedemi id30538 View details | Mexico | IT | ||
|
N/A |
|||||
| Ransomware | Counts & Dobyns id30532 View details | United States | Finance / Legal / Insurance | ||
|
Counts and Dobyins is a financial services company based in the United States, operating within the finance, legal, and insurance sector. The company provides various financial services to its clients. It was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Counts & Dobyns id30532 View details | United States | Finance / Legal / Insurance | ||
|
N/A |
|||||
| Ransomware | Centro Científico e Cultural de Macau id30533 View details | Portugal | Public Sector | ||
|
The Comissão de Coordenação e Desenvolvimento Regional do Centro (CCCM) is a regional development commission in Portugal, operating in the public sector. CCCM is responsible for promoting regional development, managing European funds, and supporting local authorities in the central region of Portugal. The entity provides various services and support to local communities, businesses, and institutions. It was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Centro Científico e Cultural de Macau id30533 View details | Portugal | Public Sector | ||
|
N/A |
|||||
| Ransomware | Jakub A.S. id30534 View details | Czechia | IT | ||
|
Jakub.cz is a Czech company operating in the IT sector, providing various services to its clients. The company is based in the Czech Republic and offers a range of IT solutions. Jakub.cz was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Jakub A.S. id30534 View details | Czechia | IT | ||
|
N/A |
|||||
| Ransomware | Cemoi id30535 View details | France | Agriculture / Food | ||
|
Cemoi.fr is a French company operating in the agriculture and food sector, offering various products and services. Located in France, the company is involved in the production and distribution of food products. Cemoi.fr was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Cemoi id30535 View details | France | Agriculture / Food | ||
|
N/A |
|||||
| Ransomware | Busscar de Colombia id30536 View details | Colombia | Manufacturing / Engineering | ||
|
Busscar is a Colombian company operating in the manufacturing and engineering sector, specifically in the production of buses and other vehicles. The company is based in Colombia and offers a range of products and services related to transportation and manufacturing. Busscar was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Busscar de Colombia id30536 View details | Colombia | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | Hillebrand Home Health id30527 View details | United States | Healthcare / Medicine | ||
|
Hillebrand Home Health is a healthcare services provider based in the United States, offering home health care solutions. The company operates in the healthcare sector, providing medical services to patients in their homes. Hillebrand Home Health was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Hillebrand Home Health id30527 View details | United States | Healthcare / Medicine | ||
|
N/A |
|||||
| Ransomware | URH Hoteliers id30528 View details | Spain | Hospitality / Food & Beverage / Tourism | ||
|
URH Hoteliers is a Spanish company operating in the hospitality sector, providing services to the food and beverage, and tourism industries. The company is based in Spain and offers various services to its clients. URH Hoteliers was listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | URH Hoteliers id30528 View details | Spain | Hospitality / Food & Beverage / Tourism | ||
|
N/A |
|||||
| Ransomware | TitanTV, Inc. id30526 View details | United States | Other | ||
|
Titantvinc is a company based in the United States, operating in the Other sector. The company's specific offerings are not well-documented, but it is known to be a part of the diverse US business landscape. Titantvinc was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | TitanTV, Inc. id30526 View details | United States | Other | ||
|
N/A |
|||||
| Ransomware | Century Equities id30495 View details | United States | Finance / Legal / Insurance | ||
|
Century Equities is a financial services company based in the US, operating in the finance, legal, and insurance sector. The company provides various financial services to its clients. Century Equities was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Century Equities id30495 View details | United States | Finance / Legal / Insurance | ||
|
N/A |
|||||
| Ransomware | Retelit SpA PIVA id30496 View details | Italy | Telecommunications | ||
|
Retelit is an Italian telecommunications company that provides a range of services including data transmission and internet connectivity. The company operates in the telecommunications sector in Italy, offering various solutions to its customers. Retelit was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Retelit SpA PIVA id30496 View details | Italy | Telecommunications | ||
|
N/A |
|||||
| Ransomware | Carolina Agri-Power id30497 View details | United States | Construction / Real Estate | ||
|
Carolinaap is a company operating in the construction and real estate sector in the United States, providing various services to clients. The company's offerings cater to the needs of the construction and real estate industries. Carolinaap was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Carolina Agri-Power id30497 View details | United States | Construction / Real Estate | ||
|
N/A |
|||||
| Ransomware | Allied Plumbing & Heating id30498 View details | NH | Energy | ||
|
Allied PNH is an energy company based in New Hampshire, operating in the energy sector. The company provides various energy-related services to its customers. Allied PNH was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Allied Plumbing & Heating id30498 View details | NH | Energy | ||
|
N/A |
|||||
| Ransomware | Eurodefi id30463 View details | France | Finance / Legal / Insurance | ||
|
Eurodefis is a financial services company based in France, operating in the finance, legal, and insurance sector. The company provides financial solutions and services to its clients. Eurodefis was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Eurodefi id30463 View details | Morocco | Finance / Legal / Insurance | ||
|
N/A |
|||||
| Ransomware | Hilo id30418 View details | Colombia | IT | ||
|
Hilo.com is an IT company based in Colombia, providing various IT services. The company operates in the IT sector, offering services to clients in the country. Hilo.com was listed as a ransomware victim associated with Qilin. |
|||||
| Ransomware | Hilo id30418 View details | Colombia | IT | ||
|
N/A |
|||||
| Ransomware | Promotora Zacapu id30419 View details | Mexico | Transportation / Travel / Logistics | ||
|
Promotorazacapu is a company based in Mexico, operating in the transportation, travel, and logistics sector. The company likely provides services such as freight transportation, travel arrangements, and logistics management to its clients. Promotorazacapu was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Promotora Zacapu id30419 View details | Mexico | Transportation / Travel / Logistics | ||
|
N/A |
|||||
| Ransomware | Navana Real Estate id30420 View details | United Arab Emirates | Construction / Real Estate | ||
|
Navana Real Estate is a company operating in the construction and real estate sector, based in the United Arab Emirates. The company likely offers various services related to property development, sales, and management. Navana Real Estate is listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Navana Real Estate id30420 View details | United Arab Emirates | Construction / Real Estate | ||
|
N/A |
|||||
| Ransomware | SPACElogic id30412 View details | Singapore | Construction / Real Estate | ||
|
Spacelogic is a Singapore-based company operating in the construction and real estate sector, providing various services to clients. The company is involved in development and management of properties. Spacelogic was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | SPACElogic id30412 View details | Singapore | Construction / Real Estate | ||
|
N/A |
|||||
| Ransomware | Global Strategic Business Process Solutions id30413 View details | United States | Finance / Legal / Insurance | ||
|
Globalstrategic.com is a US-based company operating in the finance, legal, and insurance sectors, providing various services to its clients. The company's offerings cater to the needs of its customers in these sectors. Globalstrategic.com was listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | Global Strategic Business Process Solutions id30413 View details | United States | Finance / Legal / Insurance | ||
|
N/A |
|||||
| Ransomware | CRZ Construcciones id30414 View details | Argentina | Construction / Real Estate | ||
|
CRZ Construcciones is a construction and real estate company based in Argentina, providing various services to the sector. The company operates in the Argentine market, offering construction and real estate solutions. CRZ Construcciones was listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | CRZ Construcciones id30414 View details | Argentina | Construction / Real Estate | ||
|
N/A |
|||||
| Ransomware | Red Planet Hotels id30415 View details | Philippines | Hospitality / Food & Beverage / Tourism | ||
|
Red Planet Hotels is a hotel chain operating in the Philippines, offering accommodations and services to the tourism and food and beverage sector. The company provides a range of amenities and experiences to its guests. Red Planet Hotels was listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | Red Planet Hotels id30415 View details | Philippines | Hospitality / Food & Beverage / Tourism | ||
|
N/A |
|||||
| Ransomware | Inter Power Engineering id30378 View details | United Arab Emirates | Manufacturing / Engineering | ||
|
Interpower Engrg is a company based in the United Arab Emirates, operating in the manufacturing and engineering sector. The company likely provides engineering services and solutions to its clients. It was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Inter Power Engineering id30378 View details | United Arab Emirates | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | Sintax id30372 View details | Belgium | IT | ||
|
Sintax.be is an IT company based in Belgium, providing various IT services. The company operates in the IT sector, offering solutions to its clients. Sintax.be was listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | Sintax id30372 View details | Belgium | IT | ||
|
N/A |
|||||
| Ransomware | Sun Dolphin Boats id30373 View details | United States | Manufacturing / Engineering | ||
|
Sundolphin is a US-based company operating in the manufacturing and engineering sector, offering various products and services. The company is involved in the design, development, and production of goods. Sundolphin was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Sun Dolphin Boats id30373 View details | United States | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | Bronken's Dist id30374 View details | Other | |||
|
Bronkens.com is a website operating in the other sector. The entity provides various offerings, but specific details are not publicly available. Bronkens.com was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Bronken's Dist id30374 View details | Other | |||
|
N/A |
|||||
| Ransomware | Alan F Burke id30375 View details | United States | Finance / Legal / Insurance | ||
|
Alan Burke CPA is a certified public accounting firm based in the United States, operating in the finance sector. The company provides various financial services, including accounting, tax preparation, and consulting. Alan Burke CPA was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Alan F Burke id30375 View details | United States | Finance / Legal / Insurance | ||
|
N/A |
|||||
| Ransomware | Hum & Jacoby id30369 View details | United States | Finance / Legal / Insurance | ||
|
HHJCPAs is a US-based accounting firm operating in the finance and legal sector, providing various financial services to its clients. The company is located in the United States and offers services such as auditing, tax preparation, and financial planning to individuals and businesses. HHJCPAs was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Hum & Jacoby id30369 View details | United States | Finance / Legal / Insurance | ||
|
N/A |
|||||
| Ransomware | Peligro Sports id30362 View details | United States | Retail / E-commerce | ||
|
Peligrosportsnyc is an e-commerce company based in the US, operating in the retail sector. The company offers various products online, catering to customers in the US. Peligrosportsnyc was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Peligro Sports id30362 View details | United States | Retail / E-commerce | ||
|
N/A |
|||||
| Ransomware | S.J. Louis id30361 View details | Brazil | Construction / Real Estate | ||
|
Sjlouis.com is a company operating in the construction and real estate sector in Brazil, providing various services to its clients. The company is involved in development and management of properties. Sjlouis.com was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | S.J. Louis id30361 View details | Brazil | Construction / Real Estate | ||
|
N/A |
|||||
| Ransomware | Lechner Massivhaus GmbH id30346 View details | Austria | Construction / Real Estate | ||
|
Lechner Massivhaus is a construction company based in Austria, operating in the real estate sector, offering various services related to building and construction. The company is involved in the development and construction of residential and commercial properties. Lechner Massivhaus was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Lechner Massivhaus GmbH id30346 View details | Austria | Construction / Real Estate | ||
|
N/A |
|||||
| Ransomware | COP® Vertriebs-GmbH Zentrale id30349 View details | Germany | Manufacturing / Engineering | ||
|
Cop GmbH is a German company operating in the manufacturing and engineering sector, providing various services and products to its clients. The company is based in Germany and offers solutions tailored to the needs of its customers. Cop GmbH was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | COP® Vertriebs-GmbH Zentrale id30349 View details | Germany | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | Next Clinics id30324 View details | Czechia | Healthcare / Medicine | ||
|
Next Clinics is a healthcare provider based in the Czech Republic, offering medical services to patients. The company operates in the healthcare sector, providing various medical treatments and care. Next Clinics was listed as a ransomware victim associated with Qilin. |
|||||
| Ransomware | Next Clinics id30324 View details | Czechia | Healthcare / Medicine | ||
|
N/A |
|||||
| Ransomware | Accelirate id30321 View details | United States | IT | ||
|
Accelirate is a US-based company operating in the IT sector, providing various technology solutions. As an IT sector company, Accelirate offers services to support businesses in their technology needs. Accelirate was listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | Accelirate id30321 View details | United States | IT | ||
|
N/A |
|||||
| Ransomware | Keystone Homes id30291 View details | United States | IT | ||
|
Gokeystone is an IT company based in the United States, providing various services within the IT sector. As a US-based entity, Gokeystone operates within the country's IT industry, offering its expertise and solutions to clients. Gokeystone was listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | Keystone Homes id30291 View details | United States | IT | ||
|
N/A |
|||||
| Ransomware | Precision Steel Services id30292 View details | Manufacturing / Engineering | |||
|
Precision Steel is a company operating in the manufacturing and engineering sector. The company likely provides steel products and services to various industries. Precision Steel was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Precision Steel Services id30292 View details | Manufacturing / Engineering | |||
|
N/A |
|||||
| Ransomware | Answer Precision Tool id30293 View details | United States | IT | ||
|
AnswerPrecision is an IT company based in the US, providing services in the information technology sector. The company operates in the US, offering various IT solutions. AnswerPrecision was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Answer Precision Tool id30293 View details | United States | IT | ||
|
N/A |
|||||
| Ransomware | Wood Ellis & Wood CPA id30289 View details | United States | Finance / Legal / Insurance | ||
|
Woodell Ellis Wood CPA is a certified public accounting firm based in the United States, operating within the finance, legal, and insurance sector. The company provides various financial services to its clients. Woodell Ellis Wood CPA was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Wood Ellis & Wood CPA id30289 View details | United States | Finance / Legal / Insurance | ||
|
N/A |
|||||
| Ransomware | Max Fordham id30284 View details | United Kingdom | Construction / Real Estate | ||
|
Maxfordham is a UK-based company operating in the construction and real estate sector, providing various services to clients. The company is involved in projects across the country, offering expertise in construction and property development. Maxfordham was listed as a ransomware victim associated with Qilin. |
|||||
| Ransomware | Max Fordham id30284 View details | United Kingdom | Construction / Real Estate | ||
|
N/A |
|||||
| Ransomware | Grupo Inteca id30285 View details | Mexico | IT | ||
|
Grupointeca.com is an IT company based in Mexico, offering various services within the information technology sector. The company operates in a critical industry, providing essential services to its clients. Grupointeca.com was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Grupo Inteca id30285 View details | Mexico | IT | ||
|
N/A |
|||||