Ransomware
Who Runs the Ransomware Group Qilin?
At a glance
Low rather than Medium: UK relevance is 40 of 100, little UK-specific signal so far.
Briefing
There is no written leader briefing for this story yet. These questions come from the facts we hold.
Questions to ask IT
- Does this reporting name any supplier, product or service we rely on?
- Would our monitoring spot an attack like this, and who would we call if it did?
Next steps
- Confirm whether the affected organisation is a supplier or partner, and what contingency exists
No technical write-up beyond the summary below yet.
Next steps
- Check whether the affected organisation or service is in your estate or supply chain, and follow its guidance
Summary
- The cybercrime group Qilin has emerged as the world's most active ransomware affiliate program, claiming at least 365 victim organisations in the past three months alone.
Pulse
Last change 2h ago · Next recheck 11 Nov 2026, 20:11 UK time
- Story11 Nov 2026, 18:11 UK time · 2h ago
Linked reporting from KrebsOnSecurity (independent original reporting).
Read source (KrebsOnSecurity)
1 entry so far. The timeline chart appears once this story has more history.
Sources
- KrebsOnSecurityNews
Who Runs the Ransomware Group Qilin?
How we know
Statements extracted from sources. Higher confidence means stronger corroboration.
- ClaimedHeadline60% confidence
Who Runs the Ransomware Group Qilin?
- ProbableSummary fact75% confidence
The cybercrime group Qilin has emerged as the world's most active ransomware affiliate program, claiming at least 365 victim organisations in the past three months alone.