qilin - f4n6

notes

Ransomware: qilin named Vigatec (DE)

1. Executive summary On 17 September 2026 the ransomware operator tracked as "qilin" listed the German engineering firm Vigatec (www.vigatec.com) as a

18 Sep 2026 · 4 min read read →

notes

Ransomware: qilin named Thema Foundries (FR)

1. Executive summary On 2026-09-16 the ransomware leak-site aggregator ransomware.live indexed a listing in which the group "qilin" names Thema

16 Sep 2026 · 5 min read read →

notes

Ransomware: qilin named Geieg (ES)

1. Executive summary On 2026-09-15, the ransomware brand "qilin" listed a Spanish victim, Geieg (www.geieg.cat), on its leak site; the

15 Sep 2026 · 5 min read read →

notes

Ransomware: qilin named Gilco Scaffolding (GB)

1. Executive summary On 2026-09-13, the ransomware group self-styled "qilin" listed Gilco Scaffolding, a UK-based scaffolding contractor (www.gilcoscaffolding.com)

14 Sep 2026 · 4 min read read →

notes

Ransomware: qilin named The Big Table (GB)

1. Executive summary On 2026-09-05, the ransomware operator tracked as "qilin" publicly listed The Big Table (www.bigtablegroup.com, GB) as a

05 Sep 2026 · 6 min read read →

notes

Srsly Risky Biz: China's Private Sector Botnets Are Worth Disrupting

1. Executive summary On 27 August 2026 the US Department of Justice announced court-authorised seizure of three domains (qtproxy[.]xyz, qt-proxy[.]org, qt-team[

03 Sep 2026 · 8 min read read →

notes

Ransomware: qilin named Absolute Consultancy Services (GB)

1. Executive summary On 30 August 2026, the ransomware operator "qilin" listed the UK company Absolute Consultancy Services (absolutecs.co.uk) as a victim

31 Aug 2026 · 5 min read read →

notes

31th August – Threat Intelligence Report

1. Executive summary Check Point's weekly intelligence report covers four items with direct operational relevance to EMEA financial services: emergency PaperCut fixes for two

31 Aug 2026 · 8 min read read →

notes

Ransomware: qilin named Whitehouse (GB)

1. Executive summary On 28 August 2026, the Qilin ransomware group listed "Whitehouse" (UK; domain www.whitehouseandco.com) as a victim on its leak

28 Aug 2026 · 4 min read read →

notes

Ransomware: qilin named DAB Investments (GB)

1. Executive summary On 2026-08-27, the ransomware group "qilin" publicly named DAB Investments (dabinvestments.com), a UK entity, as a victim on

27 Aug 2026 · 4 min read read →

notes

Ransomware: qilin named LGG Advisors (GB)

1. Executive summary On 27 August 2026, the Qilin ransomware group publicly claimed a compromise of LGG Advisors (UK, www.lggadvisors.com), posting the victim to

27 Aug 2026 · 5 min read read →

notes

Ransomware: qilin named Displaydata (GB)

1. Executive summary On 27 August 2026, the Qilin ransomware group listed Displaydata (GB, www.displaydata.com) as a victim on its leak site. Attribution to

27 Aug 2026 · 3 min read read →