Security · High impactFan score 3 · Tier D
Who Runs the Ransomware Group Qilin?
Krebs on Security · By BrianKrebs ·
The Brief
- Qilin has emerged as the most active ransomware affiliate program, according to Krebs on Security.
- The group claims at least 365 victim organizations in the past three months.
- Krebs reports that the group's administrator made operational security mistakes, which may help identify them.
Why it matters
Qilin's high volume of claimed attacks means organizations of any size face a real risk of ransomware, so developers should review backups, access controls and incident response for systems they run.
Who’s affected
- Organizations running internet-facing or enterprise systems
- Security and DevOps teams responsible for backups and access control
- #ransomware
- #cybercrime
- #qilin
- #threat-intelligence
- #affiliate-programs
The cybercrime group Qilin has emerged as the world’s most active ransomware affiliate program, claiming at least 365 victim organizations in the past three months alone. But even top Russian hackers make operational security mistakes, and the administrator of Qilin has made a…