Ransomware Group intelligence
Qilin
ActiveTrack Qilin with 2209 published victims and 5 known leak locations in a single intelligence view.
Overview
Qilin is tracked by Breach House as a ransomware group with 2209 published victims.
United States is currently the most targeted country in this dataset.
5 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (5)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | ozsxj4hwxub7gio347ac7tyqqozvfioty37skqilzo2oqfs4cw2mgtyd.onion |
| Leak location 2 | Onion service | Unknown | kbsqoivihgdmwczmxkbovk7ss2dcynitwhhfu5yw725dboqo5kthfaad.onion |
| Leak location 3 | Onion service | Unknown | ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion |
| Leak location 4 | Onion service | Unknown | b4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion |
| Leak location 5 | Onion service | Unknown | ji57fr53anp7wb44tbbnp72qcgbhqywy4jmbncawdcrejj5amuvh3zqd.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (2209)
Search, filter and paginate the victim timeline for Qilin. Showing 201–300 of 2209.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | LabelDaddy id30282 View details | United States | Retail / E-commerce | ||
|
Labeldaddy.com is an e-commerce company based in the United States, operating in the retail sector, and offering various products. The company provides online shopping experiences for its customers. Labeldaddy.com was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | LabelDaddy id30282 View details | United States | Retail / E-commerce | ||
|
N/A |
|||||
| Ransomware | TQ Financial Services id30245 View details | United States | Finance / Legal / Insurance | ||
|
TQ Financials operates in the finance sector in the United States, providing financial services. The company is part of the broader financial, legal, and insurance sector, offering various financial solutions. TQ Financials was listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | TQ Financial Services id30245 View details | United States | Finance / Legal / Insurance | ||
|
N/A |
|||||
| Ransomware | Md Lewis id30246 View details | United States | Finance / Legal / Insurance | ||
|
MD Lewis CPA is a US-based certified public accounting firm operating in the finance, legal, and insurance sector. The company provides various financial services to its clients. MD Lewis CPA was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Md Lewis id30246 View details | United States | Finance / Legal / Insurance | ||
|
N/A |
|||||
| Ransomware | Goodwill Manasota id30247 View details | United States | NGOs / Associations | ||
|
Experience Goodwill is a US-based non-governmental organization operating in the sector of associations. It provides various services and support to communities. Experience Goodwill is involved in charitable activities and aims to make a positive impact. It was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Goodwill Manasota id30247 View details | United States | NGOs / Associations | ||
|
N/A |
|||||
| Ransomware | Sitmatic id30248 View details | Germany | IT | ||
|
Sitmatic is an IT company based in Germany, providing various IT services. The company operates in the IT sector, offering solutions to its clients. Sitmatic was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Sitmatic id30248 View details | Germany | IT | ||
|
N/A |
|||||
| Ransomware | Sisint id30249 View details | Portugal | IT | ||
|
Sisint.pt is a Portuguese IT company providing various services in the information technology sector. Located in Portugal, the company operates in the IT industry, offering a range of solutions. Sisint.pt was listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | Sisint id30249 View details | Portugal | IT | ||
|
N/A |
|||||
| Ransomware | Pennant Hills Golf Club id30224 View details | Australia | Hospitality / Food & Beverage / Tourism | ||
|
Pennanthills Golf Club is a golf club located in Australia, operating in the hospitality and tourism sector, offering golfing facilities and related services. The club is situated in a region known for its natural beauty and recreational activities. Pennanthills Golf Club was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Pennant Hills Golf Club id30224 View details | Australia | Hospitality / Food & Beverage / Tourism | ||
|
N/A |
|||||
| Ransomware | Dennis Waters Rental Properties id30151 View details | United Kingdom | Construction / Real Estate | ||
|
Dennis Waters Rental Properties is a company operating in the construction and real estate sector, based in the United Kingdom. The company likely provides rental properties and related services to clients. Dennis Waters Rental Properties was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Dennis Waters Rental Properties id30151 View details | United Kingdom | Construction / Real Estate | ||
|
N/A |
|||||
| Ransomware | Mattatuck Industrial Scrap Metal id30152 View details | United States | Manufacturing / Engineering | ||
|
Mattatuck Scrap is a manufacturing and engineering company based in the United States. The company operates in the metal recycling sector, providing various services related to scrap metal processing. Mattatuck Scrap was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Mattatuck Industrial Scrap Metal id30152 View details | United States | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | Laughlin Nunnally Hood & Crum id30153 View details | United States | Finance / Legal / Insurance | ||
|
Greenevillelaw is a law firm based in the United States, operating in the finance and legal sector. The firm provides legal services to clients in various areas of law. Greenevillelaw was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Laughlin Nunnally Hood & Crum id30153 View details | United States | Finance / Legal / Insurance | ||
|
N/A |
|||||
| Ransomware | Rossum Integration id30154 View details | Slovakia | IT | ||
|
Rossum.sk is an IT company based in Slovakia, providing various IT services. The company operates in the IT sector, offering solutions to its clients. Rossum.sk was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Rossum Integration id30154 View details | Slovakia | IT | ||
|
N/A |
|||||
| Ransomware | Dynamic Laser Solutions Ltd. id30155 View details | United Kingdom | Manufacturing / Engineering | ||
|
Dynamic Laser Solutions is a company operating in the manufacturing and engineering sector, based in the United Kingdom. The company likely provides specialized laser solutions and services to its clients. Dynamic Laser Solutions was listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | Dynamic Laser Solutions Ltd. id30155 View details | United Kingdom | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | Dixie Beverage id30156 View details | United States | Retail / E-commerce | ||
|
Dixie Beverage is a US-based company operating in the retail and e-commerce sector, offering various products to its customers. The company is involved in the beverage industry, providing a range of drinks and related services. Dixie Beverage was listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | Dixie Beverage id30156 View details | United States | Retail / E-commerce | ||
|
N/A |
|||||
| Ransomware | Chamco id30121 View details | United States | Other | ||
|
Chamco is a US-based company operating in the other sector, providing various offerings. The company is located in the United States and serves its customers with different services. Chamco was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Chamco id30121 View details | United States | Other | ||
|
N/A |
|||||
| Ransomware | Hemmersbach GmbH & Co. KG id30122 View details | Germany | IT | ||
|
Hemmersbach is a Germany-based IT services provider that offers a range of solutions to its clients. The company operates in the IT sector, providing various services to its customers. Hemmersbach is listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | Hemmersbach GmbH & Co. KG id30122 View details | Germany | IT | ||
|
N/A |
|||||
| Ransomware | Kunert Fashion id30104 View details | Germany | Manufacturing / Engineering | ||
|
Kunert.de is a German company operating in the manufacturing and engineering sector, providing various products and services. The company is based in Germany and serves clients in its respective industry. Kunert.de was listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | Kunert Fashion id30104 View details | Germany | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | Musashino University id30101 View details | Japan | Education | ||
|
Musashino University is a higher education institution located in Japan, offering various academic programs to students. The university is situated in the Tokyo metropolitan area and provides education in multiple fields. Musashino University was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Musashino University id30101 View details | Japan | Education | ||
|
N/A |
|||||
| Ransomware | KALIACT ANCHETA et Associs id30103 View details | France | Finance / Legal / Insurance | ||
|
Ancheta Associes is a French company operating in the finance, legal, and insurance sector, providing various services to clients. The company is based in France and offers expertise in financial and legal matters. Ancheta Associes was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | KALIACT ANCHETA et Associs id30103 View details | France | Finance / Legal / Insurance | ||
|
N/A |
|||||
| Ransomware | Metal Sur Famin id30098 View details | Argentina | Manufacturing / Engineering | ||
|
Metalsurfamin is a company based in Argentina, operating in the manufacturing and engineering sector. The company likely provides various services and products related to metal surfacing and manufacturing. Metalsurfamin is listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Metal Sur Famin id30098 View details | Argentina | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | Lam Soon id30092 View details | Thailand | Manufacturing / Engineering | ||
|
Lamsoon is a company based in Thailand, operating in the manufacturing and engineering sector. The company likely provides various products and services related to its sector. Lamsoon was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Lam Soon id30092 View details | Thailand | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | Bristol Place id30093 View details | United Kingdom | Construction / Real Estate | ||
|
Bristolplace.net operates in the construction and real estate sector, providing services in the United Kingdom. The company is involved in various aspects of the industry, including development and management of properties. Bristolplace.net was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Bristol Place id30093 View details | United Kingdom | Construction / Real Estate | ||
|
N/A |
|||||
| Ransomware | Gsma id30094 View details | United Kingdom | Construction / Real Estate | ||
|
GSM Architects is a construction and real estate company based in the United Kingdom, providing architectural services to clients in the sector. The company operates in the GB region, offering various services related to construction and real estate development. GSM Architects is listed as a ransomware victim associated with Qilin |
|||||
| Ransomware | Gsma id30094 View details | United Kingdom | Construction / Real Estate | ||
|
N/A |
|||||
| Ransomware | Axionlog id30081 View details | Czechia | Transportation / Travel / Logistics | ||
|
Axionlog operates in the transportation, travel, and logistics sector, providing services in the Czech Republic. The company's offerings cater to the needs of the logistics and transportation industry. Axionlog was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Axionlog id30081 View details | Czechia | Transportation / Travel / Logistics | ||
|
N/A |
|||||
| Ransomware | NASCO id30082 View details | United States | Education | ||
|
Nasco is a US-based company operating in the education sector, providing educational products and services. Nasco offers a range of materials and resources for educators, students, and schools. Nasco was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | NASCO id30082 View details | United States | Education | ||
|
N/A |
|||||
| Ransomware | 1-800-dentist id30068 View details | United States | Healthcare / Medicine | ||
|
1800dentist.com is a US-based dental referral service that connects patients with local dentists. The company operates in the healthcare sector, providing access to dental care services across the United States. 1800dentist.com was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | 1-800-dentist id30068 View details | United States | Healthcare / Medicine | ||
|
N/A |
|||||
| Ransomware | Transcore id30069 View details | United States | Transportation / Travel / Logistics | ||
|
Transcore is a US-based company operating in the transportation sector, providing logistics and travel services. The company offers various solutions to facilitate efficient transportation management. Transcore was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Transcore id30069 View details | United States | Transportation / Travel / Logistics | ||
|
N/A |
|||||
| Ransomware | ISOPLUS id30017 View details | Greece | Manufacturing / Engineering | ||
|
Isoplus GR operates in the manufacturing and engineering sector in Greece, providing various services and products to its clients. The company's offerings cater to the needs of its customers in the region. Isoplus GR was listed as a ransomware victim associated with Qilin. |
|||||
| Ransomware | ISOPLUS id30017 View details | Greece | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | Cash Canada id30003 View details | Canada | Finance / Legal / Insurance | ||
|
CashCanada is a financial services company based in Canada, operating in the finance, legal, and insurance sector. The company provides various financial offerings to its clients. CashCanada was listed as a ransomware victim associated with qilin |
|||||
| Ransomware | Cash Canada id30003 View details | Canada | Finance / Legal / Insurance | ||
|
N/A |
|||||
| Ransomware | Lee International id29994 View details | Singapore | Finance / Legal / Insurance | ||
|
Lee International is a Singapore-based company operating in the finance, legal, and insurance sector, providing various services to its clients. The company's offerings cater to the needs of its customers in these sectors. Lee International was listed as a ransomware victim associated with Qilin. |
|||||
| Ransomware | Lee International id29994 View details | Singapore | Finance / Legal / Insurance | ||
|
N/A |
|||||
| Ransomware | Lee International id29994 View details | Korea, Republic of | Finance / Legal / Insurance | ||
|
N/A |
|||||
| Ransomware | Schumacher Homes id30091 View details | United States | Construction / Real Estate | ||
|
N/A |
|||||
| Ransomware | Central Bank of Libya id30080 View details | Libya | Finance / Legal / Insurance | ||
|
N/A |
|||||
| Ransomware | Taiwan Sintong Machinery Co., Ltd id30075 View details | Taiwan, Province of China | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | Sivatel Bangkok id30076 View details | Thailand | Hospitality / Food & Beverage / Tourism | ||
|
N/A |
|||||
| Ransomware | Tri-tec id30078 View details | United States | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | Florida Engineering Services id30079 View details | United States | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | Pacific Lamp & Supply id30057 View details | United States | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | Roth Industries id29997 View details | Germany | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | Sparkle Pools id29998 View details | United States | Construction / Real Estate | ||
|
N/A |
|||||
| Ransomware | PJ Daly Contracting id30000 View details | Ireland | Construction / Real Estate | ||
|
N/A |
|||||
| Ransomware | Commune d'Eyguires id30002 View details | France | NGOs / Associations | ||
|
N/A |
|||||
| Ransomware | THL PROJECT MANAGEMENT SDN. BHD. id29990 View details | Malaysia | Construction / Real Estate | ||
|
N/A |
|||||
| Ransomware | Homes By J Anthony id29991 View details | United States | Construction / Real Estate | ||
|
N/A |
|||||
| Ransomware | ATCOM Outsourcing id29992 View details | Chile | Telecommunications | ||
|
N/A |
|||||
| Ransomware | Skupina Don Don - GRUPO BIMBO id29975 View details | Slovenia | Retail / E-commerce | ||
|
N/A |
|||||
| Ransomware | Makel Companies Group id29978 View details | Türkiye | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | Golfview Developmental Center id29943 View details | United States | NGOs / Associations | ||
|
N/A |
|||||
| Ransomware | Misericórdia de Santo Tirso id29927 View details | Portugal | Education | ||
|
N/A |
|||||
| Ransomware | Q Link Wireless id29928 View details | United States | Telecommunications | ||
|
N/A |
|||||
| Ransomware | Cng Ty Cp T Vn Xd Tng Hp id29920 View details | Viet Nam | Other | ||
|
N/A |
|||||
| Ransomware | MAVA Healthcare id29921 View details | United States | Healthcare / Medicine | ||
|
MAVA Medical is a U.S.-based healthcare and medicine organization associated with behavioral health services and patient support. Public materials for the MAVA brand describe comprehensive services focused on mental well-being, appointments, communication, and related care administration. The organization’s privacy policy also reflects the handling of patient information in the course of providing, maintaining, and improving services. It was listed as a ransomware victim associated with qilin. |
|||||
| Ransomware | Grupo Indi id29924 View details | Mexico | — | ||
|
N/A |
|||||
| Ransomware | Can Healthcare Group id29925 View details | Türkiye | — | ||
|
N/A |
|||||
| Ransomware | DISTINET MURCIA SL id29824 View details | Spain | IT | ||
|
N/A |
|||||
| Ransomware | Maui Divers Jewelry id29784 View details | United States | Retail / E-commerce | ||
|
N/A |
|||||
| Ransomware | Bitek System id29781 View details | Korea, Republic of | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | AltaVista Strategic Partners id29736 View details | Mexico | IT | ||
|
N/A |
|||||
| Ransomware | Plaxen & Adler id29737 View details | Germany | Finance / Legal / Insurance | ||
|
N/A |
|||||
| Ransomware | Miller & Zois id29739 View details | United States | Finance / Legal / Insurance | ||
|
N/A |
|||||
| Ransomware | Iliff id29740 View details | United States | IT | ||
|
N/A |
|||||
| Ransomware | Efficient Home id29741 View details | United States | Construction / Real Estate | ||
|
N/A |
|||||
| Ransomware | Bekman Marder Hopper Malarkey & Perlin id29742 View details | Moldova, Republic of | Finance / Legal / Insurance | ||
|
N/A |
|||||
| Ransomware | Dulany Leahy Curtis & Brophy id29743 View details | United States | Other | ||
|
N/A |
|||||
| Ransomware | dbHMS id29744 View details | Germany | Healthcare / Medicine | ||
|
N/A |
|||||
| Ransomware | Teserra Outdoors id29745 View details | United States | Retail / E-commerce | ||
|
N/A |
|||||
| Ransomware | Wright Constable & Skeen id29746 View details | United States | Finance / Legal / Insurance | ||
|
N/A |
|||||
| Ransomware | Milstein Siegel id29747 View details | United States | Other | ||
|
N/A |
|||||
| Ransomware | JV Equipment id29748 View details | United States | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | SAMES id29749 View details | United States | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | C.C. Creations id29750 View details | United States | Retail / E-commerce | ||
|
N/A |
|||||
| Ransomware | TagleRock Technologies id29751 View details | IT | |||
|
N/A |
|||||