# Who Runs the Ransomware Group Qilin?

Source: [Krebs on Security](https://krebsonsecurity.com/2026/11/who-runs-the-ransomware-group-qilin/) · 2026-11-11 · Security
Page: https://themorning.dev/story/who-runs-the-ransomware-group-qilin-8cdc4a0f74c83bb2
Kind: security · Impact: high

## In brief

- Qilin has emerged as the most active ransomware affiliate program, according to Krebs on Security.
- The group claims at least 365 victim organizations in the past three months.
- Krebs reports that the group's administrator made operational security mistakes, which may help identify them.

## Why it matters

Qilin's high volume of claimed attacks means organizations of any size face a real risk of ransomware, so developers should review backups, access controls and incident response for systems they run.

## Coverage

- [Who Runs the Ransomware Group Qilin?](https://krebsonsecurity.com/2026/11/who-runs-the-ransomware-group-qilin/) — Krebs on Security, 2026-11-11

Tags: ransomware, cybercrime, qilin, threat-intelligence, affiliate-programs

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev