qilin
RansomwareAbout the group
Qilin ransomware was first observed in July of 2022. Qilin Ransomware is written in Golang and supports multiple encryption modes; all of which are controlled by the operator. Qilin actors practice double extortion – demanding payment for a decryptor, as well as for the non-release of stolen data.
Exploited vulnerabilities 1
CVEs this group is known to exploit, per MITRE ATT&CK. Ordered by real-world severity.
Impact and victims
The group qilin has 11 known ransomware victims. See the most affected sectors and countries and recent victims.
11known victims
11in Brazil
6sectors hit
Activity (12 months)
Most attacked sectors
Agriculture and Food Production2
Manufacturing2
Retail & E-Commerce2
Transportation2
Government & Defense1
Other1
Most affected countries
🇧🇷 Brasil11
Recent victims
Alicotrans
Cpcg
PP+K
S.J. Louis
Eat Salad
Complastex.com
Arimex Importadora
Tupi
Prefeitura do Jaboatão dos Guararapes
Logimodal Operações Logísticas
Lojas Torra
qilin uses real techniques and exploits real flaws. TrueHacking's AI Autonomous Pentest simulates these attacks against your infrastructure and brings more security to your application.
Explore the AI Autonomous Pentest →