Threat actor
115 observed events
AIQilin has been observed conducting only
AIQilin claims to have listed AmSpec, an energy & utilities sector organization, on its extortion site. This is an unverified extortion-site listing.
AIQilin has listed ALIZE (alize-sud.fr), a professional services firm, on its extortion site, claiming possession of data. This is an unverified claim per Ransomware.live; no details are confirmed.
AIRansomware group Qilin claims to have listed Jakle & Alexander on its extortion site, per Ransomware.live. This is an unverified claim.
AIQilin claims to have listed Akuur Law Firm on its extortion site, per RansomLook. This is an unverified claim.
AIQilin claims to have listed J&T Bank and Trust, a financial services firm, on an extortion site. This unverified claim is reported via Ransomware.live.
AIQilin has listed Bloom Financials on its extortion site, per RansomLook, claiming a breach; this remains unverified.
AIQilin claims to have listed Mera Metal, a manufacturing firm, on its extortion site, according to Ransomware.live. This is an unverified claim.
AIQilin claims to have listed STADLER Sensorik CNC-Technik, a manufacturing firm, on its extortion site, per Ransomware.live. This is an unverified claim; details of the listing are not provided.
AIQilin claims to have listed Stade Francais (hospitality sector) on its extortion site, per Ransomware.live. Unverified claim.
AIQilin claims to have listed Galvin Brothers on its extortion site, per RansomLook. This is an unverified allegation of a data leak, not a confirmed breach.
AIQilin claims to have listed RUPP Spritzguss on its extortion site. This is an unverified claim.
AIQilin listed Galvin Brothers, a manufacturing firm, on its extortion site, claiming to have compromised the organization. This is an unverified claim from Ransomware.live metadata, not a confirmed breach.
AIQilin has listed RUPP Spritzguss, a manufacturing company, on its extortion site. This is an unverified claim.
AIQilin claims to have listed WD Masonry & Concrete on its extortion site; the listing is an unverified claim.
AIQilin has listed Service Electric on its extortion site, per RansomLook, claiming an incident. This is an unverified claim; no details are confirmed.
AIQilin has listed Universitatea De Vest Vasile Goldi Din Arad on its extortion site, per RansomLook. This is an unverified claim of a data breach, with no confirmed details provided.
AIQilin ransomware group claims to have listed Service Electric, an energy & utilities firm, on its extortion site. The claim, tracked via Ransomware.live, is unverified.
AIQilin has listed Freedom Claims Management, a financial services firm, on its extortion site, per Ransomware.live. The claim is unverified.
AIQilin listed Mairie de Drancy on its extortion site, claiming a breach. The claim is unverified per RansomLook.
AIQilin claims to have listed INTERTRUST AUSTRALIA PTY LTD, a Professional Services firm, on its extortion site. This is an unverified listing from Ransomware.live, not a confirmed breach.
AIQilin claims to have listed Asset Flooring Group Australia, a retail/e-commerce firm, on Ransomware.live's extortion site. This is an unverified claim of a data leak.
AIQilin claims to have listed The Saturday Evening Post on its extortion site, per RansomLook. This is an unverified claim.
AIQilin claims to have listed Commercial Furniture Interiors on its extortion site, per RansomLook. The claim is unverified.
AIQilin has listed Dienst Pack Systems on its extortion site, claiming a breach. This is an unverified claim, with no further details confirmed.
AICeragres was listed by Qilin on RansomLook as an alleged extortion victim. This is an unverified claim; no breach is confirmed.
AIQilin has listed Pointe Property Group on its extortion site, as tracked by RansomLook. This is an unverified claim of a data leak.
AIQilin claims to have listed Schreiner Trockenbau GmbH on RansomLook’s extortion-site listing. This is an unverified claim, not a confirmed breach.
AIQilin claims to have listed manufacturing firm Wire Products on its extortion site; the claim is unverified.
AIQilin claims to have breached The Saturday Evening Post, listing the organization on its extortion site. Ransomware.live flags this as an unverified claim.
AIQilin has listed Commercial Furniture Interiors, a retail & e-commerce firm, on its extortion site, per Ransomware.live. This is an unverified claim of a data leak, not a confirmed breach.
AIQilin claims to have breached manufacturing firm Dienst Pack Systems, per an unverified extortion-site listing on Ransomware.live.
AIQilin claims to have listed Ceragres, a manufacturing company, on its extortion site. This is an unverified claim from Ransomware.live.
AIQilin has listed Pointe Property Group on its extortion site, claiming a breach. This is an unverified claim, and no details are provided.
AIQilin ransomware group claims to have listed Schreiner Trockenbau GmbH, a manufacturing firm, on its extortion site. This is an unverified claim from Ransomware.live, not a confirmed breach.
AIQilin claims to have listed Community Management Associates, a Professional Services firm, on its extortion site. The listing, tracked by Ransomware.live, is unverified.
AIQilin claims to have breached The Dcoop, an agriculture and food production organization, per a Ransomware.live extortion-site listing. The claim is unverified.
AIQilin claims to have listed Hawaii Family Dental, a healthcare organization, on its extortion site, per Ransomware.live. This is an unverified breach claim; no data details are provided.
AIQilin claims to have listed Audio Precision, Inc on its extortion site. This is an unverified claim.
AIThe Qilin ransomware group claims to have breached Audio Precision, Inc, a technology sector company, as listed on Ransomware.live.
AIQilin listed TenSparrows on its extortion site and claims to have compromised the organization. The claim is unverified.
AIRansomware group Qilin claims to have data from Db Tarimsal Enerji, an agriculture and food production company, according to an extortion site listing.
AIRansomware group Qilin claims to have breached technology firm Byonyks, as listed on an extortion site.
AIQilin claims to have breached Prenisac, according to an unverified listing on Ransomware.live.
AIQilin listed Excel Consultores, a professional services firm, on its extortion site, claiming to have breached the organization.
AIQilin claims to have breached Affinity Capital, a financial services firm, according to an unverified extortion site listing.
AIQilin claims to have compromised servitelco, a technology sector company, per an unverified ransomware.live listing.
AIUnverified claim: Qilin claims to have breached Orimar, per a RansomLook extortion-site listing.
AIQilin claims to have breached Indian Motos Inmot, a manufacturing company, as listed on their extortion site.
AIThe Qilin ransomware group claims to have listed Hoc on its extortion site.
AIAccording to an unverified listing on Ransomware.live, threat group Qilin claims to have breached organization Hoc.
AIThe Qilin ransomware group claims to have listed Gran valle negocios on its extortion site; this claim is unverified.
AIQilin claims to have listed Groupe Fenwick on its extortion site; the claim is unverified.
AIQilin claims to have breached Savills France, listing the organization on its extortion site.
AIQilin claims to have breached Wilbert's, listed on an extortion site as an unverified claim.
AIQilin claims to have listed Contacto Garantido on its extortion site, per RansomLook.
AIThe Qilin group claims to have compromised Universitatea de Vest "Vasile Goldiș" din Arad, an education sector entity, as listed on their extortion site.
AIQilin has listed Plitvička Jezera Nacionalni Park on its extortion site, claiming to have breached the national park.
AIQilin claims to have breached professional services firm Jubilee Jobs and has listed it on its extortion site.
AIQilin claims to have breached The Myers Y Cooper, a professional services firm. The extortion-site listing is unverified.
AIQilin claims to have listed Guntert & Zimmerman, a manufacturer, in an extortion site listing. The claim is unverified.
AIQilin claims to have breached Principle Diagnostics Laboratory, a healthcare organization, according to an extortion site listing on Ransomware.live.
AIQilin claims to have breached manufacturing firm GURR Abdichtungstechnik GmbH, as listed on an extortion site.
AIQilin listed GOP on its extortion site, according to RansomLook. This claim is unverified.
AIThe ransomware group Qilin has listed GOP on its extortion site, claiming to have breached the organization.
AIQilin claims to have breached Stryker, according to an unverified extortion listing on RansomLook.
AIRansomware group Qilin claims to have breached Kean University (education), per an unverified extortion listing on Ransomware.live.
AIQilin claims to have listed Highline Community College, an education sector organization, on their extortion site.
AIQilin claims to have breached manufacturing firm Machinerie P&W, as listed on an extortion site (unverified).
AIQilin claims to have listed professional services firm ABM Enviro on its extortion site.
AIAccording to RansomLook, Qilin claims to have breached WellPerf, listing the organization on its extortion site; status is unverified.
AIQilin has listed Corporate 360 Business Solutions on its extortion site, claiming a breach. This is an unverified claim.
AIQilin claims to have breached healthcare firm Assos Pharmaceuticals, per an unverified listing on Ransomware.live.
AIQilin group claims to have breached Cano Industrial, a manufacturing company, per an unverified listing on ransomware.live.
AIQilin claims to have listed Triton Trading, a financial services firm, on Ransomware.live; this listing
AIQilin claims to have listed AppleOne Properties on its extortion site, an unverified claim per Ransomware.live.
AIQilin claims to have breached Recsa, listing the organization on its extortion site. The claim is unverified.
AIQilin extortion site listing claims RehaVital Gesundheitsservice GmbH as a victim, per RansomLook (unverified).
AIQilin claims to have breached Evergreen Title and listed it on its extortion site. This
AIQilin claims to have listed P & A Construction, a construction firm, on its extortion site. The claim is unverified per Ransomware.live.
AIQilin claims to have breached Primeline Logistics, according to a listing on RansomLook.
AIPer an extortion listing on Ransomware.live, Qilin claims to have compromised
AIQilin claims to have listed Cpcg on its extortion site, according to an unverified ransomware.live listing.
AIQilin ransomware group claims to have breached EFU Life Assurance
AIQilin claims to have breached Infina Health, a healthcare organization, as listed on a ransomware extortion site.
AIThreat group Qilin claims to have breached Postres Reina, listing the organization on its extortion site.
AIQilin claims to have breached Evergreen Title, a financial services firm, listing it on its extortion site; this claim is unverified.
AIQilin claims to have listed RehaVital Gesundheitsservice GmbH, a healthcare organization, on Ransomware.live.
AIQilin listed Postres Reina (Agriculture/Food Production) on Ransomware.live, claiming to have stolen data.
AIThe Qilin ransomware group claims to have listed PP+K on its extortion site, per an unverified RansomLook listing.
AIAccording to an unverified listing on RansomLook, Qilin claims to have breached Eana.
AIQilin claims to have breached Synergy Products, as listed on its RansomLook extortion site. The claim is unverified.
AIQilin has listed Bolt & Nut Manufacturing on Ransomware.live, claiming to have stolen data from the manufacturing sector.
AIQilin claims to have compromised PP+K, listing the organization on its extortion site; the claim is unverified
AIQilin claims to have breached Eana, per an unverified extortion-site listing on Ransomware.live.
AIQilin claims to have breached Synergy Products, as listed on its extortion site.
AIQilin claims to have listed Don Tortaco Mexican Grill on its extortion site. The claim is unverified.
AIQilin claims to have breached Associated Theatrical Contractors, per an extortion-site listing.
AIQilin claims to have breached City Ambulance Service, a healthcare organization, as listed on its extortion site.
AIQilin claims to have breached Famesa, an agriculture and food production firm. The extortion-site claim is unverified.
AIQilin claims to have listed Armara on its extortion site, as per RansomLook; the claim is unverified.
AIThe Qilin ransomware group claims to have listed Heartland Catfish on its extortion site. This is an unverified claim.
AIQilin claims to have breached Salina Supply, according to an unverified listing on RansomLook.
AIQilin has listed St Martha Catholic Church on its extortion site, claiming to have compromised the organization.
AIQilin claims to have breached The Nueva School (education sector), as listed on an extortion site.
AIQilin claims to have breached Sicc, per a listing on RansomLook. This claim is unverified.
AIQilin claims to have data from KLD Labs, a technology firm, according to a listing on Ransomware.live.
AIQilin claims to have breached AK Preparedness, a business services firm, per an extortion site listing. Unverified.
AIQilin has listed Powder River Heating & Air Conditioning on its extortion site, claiming to have data from the Consumer Services firm. This claim is unverified.
AIQilin claims to have listed Droguería Martorani on its extortion site, per RansomLook.
AIQilin claims to have listed Powder River Heating & Air Conditioning on its ransomware extortion site.
AIQilin claims to have breached Acosol, as listed on the RansomLook extortion site.
AIQilin claims to have breached Cafar, an agriculture and food production firm, as listed on its extortion site.