Actor Profile

🏹 Qilin — Ransomware

Qilin ransomware was first observed in July of 2022. Qilin Ransomware is written in Golang and supports multiple encryption modes; all of which are controlled by the operator. Qilin actors practice double extortion – demanding payment for a decryptor, as well as for the non-release of stolen data.

🔄 Pivot:🌎 US 🏹 Qilin

Classification

Ransomware

Leak-site victims

2.2K

Ransomware.live

Associated IoCs

local intel

MITRE techniques

—

ATT&CK

Tracked

Yes

Ransomware.live

PIVOT🔍 Advanced Search 🕵 OSINT Pivot 🔗 Link Analysis 🕑 Timeline 📤 Export STIX/MISP

🔥 Leak-Site Victims (2.2K)

Victim	Country	Published	Domain
White-Daters & Associates, Inc	US	2026-08-17T21:30:02.345274+00:00	`www.whitedaters.com`
The University of the West Indies	TT	2026-08-17T21:29:24.017389+00:00	`www.uwi.edu`
EmpireWorks		2026-08-17T21:28:43.333930+00:00	`www.empireworks.com`
Teikoku USA	US	2026-08-16T18:58:39.831305+00:00	`www.teikokuusa.com`
AGUNSA	CL	2026-08-16T18:58:03.050331+00:00	`www.agunsa.com`
Coface	IT	2026-08-16T18:57:25.675952+00:00	`www.coface.it`
Spoonful of Comfort	US	2026-08-16T18:56:41.611114+00:00	`www.spoonfulofcomfort.com`
Mulino Padano	IT	2026-08-16T15:59:09.117550+00:00	`www.mulinopadano.it`
MOSAID Technologies	CA	2026-08-16T12:31:17.376249+00:00	`www.mosaid.com`
INVENSITY	DE	2026-08-16T12:30:37.002604+00:00	`www.invensity.com`
Megawide	PH	2026-08-16T12:29:59.570610+00:00	`www.megawide.com.ph`
Desatera Sdn Bhd	MY	2026-08-16T11:31:50.873374+00:00	`www.desatera.com.my`
Loescher editore Torino	IT	2026-08-16T11:31:11.868205+00:00	`www.loescher.it`
Botek	DE	2026-08-16T11:30:31.177913+00:00	`www.botek.de`
Zanichelli	IT	2026-08-16T11:29:51.185507+00:00	`www.zanichelli.it`
Arnall Golden Gregory	US	2026-08-16T09:31:57.355251+00:00	`www.agg.com`
ASCII Group	JP	2026-08-16T09:31:19.397288+00:00	`www.asciigroup.com`
Double H Equipment	US	2026-08-16T09:29:25.291282+00:00	`www.doublehequip.com`
WEBA Meubelen	BE	2026-08-16T15:58:24.837014+00:00	`www.weba.be`
Jone Précision	FR	2026-08-16T09:32:36.197046+00:00	`www.joneprecision.com`
DELTA WAYS	DE	2026-08-16T09:30:40.960671+00:00	`www.deltaways.de`
motorenmaier gmbh	DE	2026-08-16T09:30:02.880941+00:00	`www.motorenmaier.de`
Connections	BE	2026-08-14T14:34:23.200539+00:00	`www.connections.be`
Radiant	SG	2026-08-14T09:59:13.248926+00:00	`www.radiants.com`
Lercher Werkzeugbau	AT	2026-08-14T08:33:29.118909+00:00	`www.lercher.at`
3f	DK	2026-08-14T08:32:37.632296+00:00	`www.3f.dk`
PenLink	US	2026-08-14T08:31:42.514677+00:00	`www.penlink.com`
Urban Worldwide	NL	2026-08-14T08:31:03.917214+00:00	`www.urbanworldwide.com`
FERRARI MANGIMI SRL	IT	2026-08-14T20:27:58.071728+00:00	`lavoroperte.regione.emilia-romagna.it/offerte-lavoro/piacenza/meccanico-auto-sarmato/507478`
Aletex Group	ES	2026-08-14T10:28:23.621645+00:00	`www.aletex.net`
D & J Beverage Service	US	2026-08-13T13:29:41.689685+00:00	`www.dandjbeverage.com`
United Association Local Union 345	US	2026-08-12T15:57:32.205087+00:00	`www.ua345.org`
Wanted	NL	2026-08-12T08:30:01.802474+00:00	`www.teamwanted.nl`
Crown Group	PK	2026-08-11T17:28:38.943041+00:00	`www.crowngroup.com.pk`
Service Evaluation Concepts	US	2026-08-11T13:28:05.098896+00:00	`www.serviceevaluation.com`
tommer construction	US	2026-08-11T12:31:35.594686+00:00	`www.tommerconstruction.com`
G.M.A. GRANDI MARCHE AUTOMOBILI - S.R.L	IT	2026-08-11T17:29:19.817959+00:00	`autogma.it`
HIGEN MOTOR(critical data)	KR	2026-08-10T19:39:24.349878+00:00	`www.higen.co.kr`
City of Winchester	US	2026-08-10T12:01:47.794538+00:00	`www.winchesterky.com`
B Wright Drywall	US	2026-08-10T12:00:57.733612+00:00	`www.bwrightdrywall.com`
Synergy Interactive	US	2026-08-09T18:32:35.790215+00:00	`www.sinyc.com`
Energetic Development Corp	TW	2026-08-09T17:02:32.677186+00:00	`www.edccorp.com.tw`
Panda Logistics Taichung Branch	TW	2026-08-09T17:02:03.031326+00:00	`www.pandalog.com`
East Field Corporation	JP	2026-08-09T17:01:33.768395+00:00	`efc-tono.com`
Chun Tai Sing Chemical Industry	HK	2026-08-09T17:01:00.851412+00:00	`www.crocoil.com`
Price Shoes	MX	2026-08-09T13:31:33.331482+00:00	`www.priceshoes.com`
Naval Interior Team	FI	2026-08-09T13:31:01.511636+00:00	`www.nit.fi`
Phithan Phanich	TH	2026-08-09T11:00:35.747597+00:00	`www.phithan-usedcar.com`
Grupo Diestra	PE	2026-08-09T10:59:54.521147+00:00	`www.grupodiestra.com`
Université Libre de Bruxelles	BE	2026-08-09T10:59:21.515004+00:00	`www.ulb.be`
Service d'usinage 9002	CA	2026-08-09T08:28:24.677986+00:00	`www.usinage9002.com`
pm-energy Die Solarexperten	DE	2026-08-09T14:57:55.232579+00:00	`pm-energy.de`
Harplast SRL	RO	2026-08-09T14:32:05.337617+00:00	`www.HARPLAST.ro`
Clausing	DE	2026-08-08T12:30:30.169180+00:00	`www.clausing-tiefbau.com`
Impact Centre Chrétien	FR	2026-08-08T16:28:01.710957+00:00	`www.impactcentrechretien.com`
CLLS Co Ltd	SG	2026-08-08T12:29:06.719361+00:00	`CLLS.com.sg`
Berlin Brandenburgische Wohnungsbaugenossenschaft	DE	2026-08-18T11:59:45.474078+00:00	`www.bbwbg.de`
Astro Electroplating	US	2026-08-07T13:32:41.706397+00:00	`www.astroelectroplating.com`
Filtronic	GB	2026-08-07T13:32:01.593698+00:00	`www.filtronic.com`
John C Saunders, CPA	US	2026-08-07T13:30:42.414688+00:00	`www.johncsaunderscpa.com`
EISNER ZT GMBH	AT	2026-08-07T13:31:22.281311+00:00	`www.zteisner.at`
Nikan Awasisak Agency	CA	2026-08-07T13:29:44.434446+00:00	`www.nikanaa.ca`
Depona	SE	2026-08-07T13:29:00.592350+00:00	`www.depona.se`
Crystal Pharmatech	US	2026-08-06T23:28:03.221965+00:00	`www.crystalpharmatech.com`
AmSpec	US	2026-08-06T15:27:38.136651+00:00	`www.amspecgroup.com`
Jakle & Alexander	US	2026-08-06T15:26:11.062629+00:00	`www.jaklelaw.com`
Akuur Law Firm	TR	2026-08-06T14:27:43.401452+00:00	`www.akugurlaw.com`
ALIZE (alize-sud.fr)	FR	2026-08-06T15:26:53.663306+00:00	`alize-sud.fr`
J&T Bank and Trust	US	2026-08-06T14:27:01.144668+00:00	`www.jtbanktrust.com`
Mera Metal	PL	2026-08-05T18:29:39.074132+00:00	`www.merametal.pl`
STADLER Sensorik CNC-Technik	AT	2026-08-05T16:32:34.871042+00:00	`www.stadlercnc.at`
Stade Francais	FR	2026-08-05T13:58:46.394814+00:00	`www.stadefrancais.com`
Galvin Brothers	IE	2026-08-04T18:01:02.117705+00:00	`www.galvinbrothers.com`
RUPP Spritzguss	DE	2026-08-04T18:00:04.776241+00:00	`www.rupp-spritzguss.de`
WD Masonry & Concrete	US	2026-08-04T12:56:16.202618+00:00	`www.wdmandc.com`
Bloom Financials	GB	2026-08-06T09:28:26.968879+00:00	`www.bloomfinancials.com`
Service Electric	US	2026-08-03T13:25:18.188317+00:00	`www.secv.com`
Freedom Claims Management	US	2026-08-03T03:56:32.895408+00:00	`www.freedomclaimsinc.com`
Asset Flooring Group Australia	AU	2026-08-02T20:26:32.094987+00:00	`www.assetflooring.com.au`
Wire Products	US	2026-08-02T12:30:44.305380+00:00	`www.wireproducts.us`
INTERTRUST AUSTRALIA PTY LTD	AU	2026-08-02T20:27:11.858120+00:00	`www.seedoutsourcing.com`
The Saturday Evening Post	US	2026-08-01T13:54:45.323165+00:00	`www.saturdayeveningpost.com`
Commercial Furniture Interiors	US	2026-08-01T13:53:23.068066+00:00	`www.cfioffice.com`
Dienst Pack Systems	DE	2026-08-01T13:52:12.208209+00:00	`www.dienst-packsystems.de`
Ceragres	CA	2026-08-01T13:51:29.785100+00:00	`www.ceragres.ca`
Pointe Property Group	US	2026-08-01T13:50:47.985405+00:00	`www.pointecre.com`
Schreiner Trockenbau GmbH	AT	2026-08-01T13:50:07.182188+00:00	`www.schreiner-trockenbau.at`
Community Management Associates	US	2026-07-31T19:00:46.349539+00:00	`www.cmamanagement.com`
The Dcoop	ES	2026-07-31T12:33:46.118491+00:00	`www.dcoop.es`
Hawaii Family Dental	US	2026-07-31T03:58:25.547178+00:00	`www.hawaiifamilydental.com`
Audio Precision, Inc	US	2026-07-30T20:29:19.558231+00:00	`www.ap.com`
Db Tarimsal Enerji	TR	2026-07-30T09:58:56.421900+00:00	`www.dbtarimsalenerji.com.tr`
Byonyks	US	2026-07-30T09:00:15.067223+00:00	`www.byonyks.com`
Prenisac	US	2026-07-30T08:59:55.037097+00:00	`www.prenisac.com`
Excel Consultores	MX	2026-07-30T08:59:35.708539+00:00	`www.excel.com.mx`
Affinity Capital	US	2026-07-30T08:58:58.944021+00:00	`www.affinitycorp.net`
servitelco	CL	2026-07-30T07:59:05.404253+00:00	`www.servitelco.com`
Orimar	BE	2026-07-30T07:58:28.793582+00:00	`www.orimar.be`
Indian Motos Inmot	EC	2026-07-30T07:57:52.197057+00:00	`www.inmot.com.ec`
TenSparrows	US	2026-07-30T10:59:55.758950+00:00	`www.tensparrows.com`
Adpo	BE	2026-07-30T07:59:41.084146+00:00	`www.adpo.com`
Hoc	GB	2026-07-28T21:58:46.614836+00:00	`www.hocltd.com`
Gran valle negocios	AR	2026-07-28T10:01:53.210835+00:00	`www.granvallenegocios.com.ar`
Wilbert's	US	2026-07-27T11:58:25.874094+00:00	`www.wilberts.com`
Savills France	FR	2026-07-27T11:59:02.253716+00:00	`savills.fr`
Contacto Garantido	MX	2026-07-26T14:58:27.528259+00:00	`www.contactogarantido.com`
Jubilee Jobs	NG	2026-07-25T12:58:56.414345+00:00	`www.jubileejobs.org`
The Myers Y Cooper	US	2026-07-25T12:56:04.165586+00:00	`www.cooper-co.com`
Guntert & Zimmerman	CH	2026-07-25T11:59:11.234236+00:00	`www.guntert.com`
Principle Diagnostics Laboratory	IN	2026-07-25T11:30:22.871899+00:00	`www.principlediagnostics.com`
GURR Abdichtungstechnik GmbH	DE	2026-07-25T10:28:53.322165+00:00	`www.gurr-abdichtungstechnik.de`
GOP	GB	2026-07-24T22:59:12.543596+00:00	`www.gopltd.com`
Kean University	US	2026-07-24T10:36:49.521214+00:00	`www.kean.edu`
Highline Community College	US	2026-07-24T10:36:11.795447+00:00	`www.highline.edu`
Ejército Argentino	AR	2026-07-24T10:37:25.468186+00:00	`argentina.gob.ar`
Machinerie P&W	CA	2026-07-23T15:30:15.864660+00:00	`www.machineriepw.com`
ABM Enviro	CA	2026-07-23T15:29:34.178672+00:00	`www.abmenviro.ca`
WellPerf	GB	2026-07-23T09:28:40.283301+00:00	`www.wellperf.com`
Corporate 360 Business Solutions	CA	2026-07-23T08:31:50.379676+00:00	`www.corporate360.ca`
Assos Pharmaceuticals	TR	2026-07-23T08:31:22.918850+00:00	`www.assospharma.com`
Cano Industrial	MX	2026-07-23T08:30:46.395186+00:00	`www.canoindustrial.com`
Triton Trading	PE	2026-07-23T08:30:06.621184+00:00	`www.triton.com.pe`
AppleOne Properties	PH	2026-07-23T08:29:29.281906+00:00	`www.api.com.ph`
Sunway Berhad	MY	2026-07-23T04:28:45.174350+00:00	`www.sunway.com.my`
Universitatea De Vest Vasile Goldi Din Arad	RO	2026-08-03T19:55:46.445856+00:00	`www.uvvg.ro`
Universitatea de Vest „Vasile Goldiș” din Arad	RO	2026-07-26T14:29:53.747725+00:00	`www.uvvg.ro`
P & A Construction	US	2026-07-22T18:03:51.681617+00:00	`www.paconst.com`
Primeline Logistics	IE	2026-07-22T16:59:39.918137+00:00	`www.primeline.ie`
Recsa	CR	2026-07-22T16:58:56.834530+00:00	`www.recsa.com`
Salida Union School District	US	2026-07-22T16:58:11.045853+00:00	`www.salida.k12.ca.us`
Cpcg	BR	2026-07-22T16:08:36.690502+00:00	`www.cpcgr.com`
EFU Life Assurance	PK	2026-07-22T16:07:13.270022+00:00	`www.efulife.com`
Infina Health		2026-07-22T16:05:55.661998+00:00	`www.infinahealth.com`
Evergreen Title	US	2026-07-21T20:16:35.167646+00:00	`www.evergreentitlecompany.com`
RehaVital Gesundheitsservice GmbH	DE	2026-07-21T15:10:52.552047+00:00	`www.rehavital.de`
Postres Reina	ES	2026-07-21T07:04:30.473467+00:00	`www.postresreina.com`
Bolt & Nut Manufacturing	GB	2026-07-20T09:41:37.765269+00:00	`www.bnml.co.uk`
PP+K	BR	2026-07-19T18:10:55.886033+00:00	`www.uniteppk.com`
Eana	AR	2026-07-19T18:10:04.311486+00:00	`www.eana.com.ar`
Synergy Products	TR	2026-07-19T18:09:22.635290+00:00	`www.synergy-trt.com`
Don Tortaco Mexican Grill	US	2026-07-19T16:05:26.386352+00:00	`www.dontortaco.com`
Associated Theatrical Contractors	US	2026-07-19T16:04:28.891531+00:00	`www.associatedtheatrical.com`
Famesa	PE	2026-07-19T09:05:53.671412+00:00	`www.famesa.com.pe`
City Ambulance Service	US	2026-07-19T09:06:42.408808+00:00	`www.cityambu.com`
Heartland Catfish	US	2026-07-18T13:37:37.481309+00:00	`www.heartlandcatfish.com`
Salina Supply	US	2026-07-18T13:36:52.734595+00:00	`www.salinasupply.com`
St Martha Catholic Church	US	2026-07-18T13:35:16.092868+00:00	`www.stmartha.com`
The Nueva School	US	2026-07-18T13:34:28.127090+00:00	`www.nuevaschool.org`
Sicc	IT	2026-07-18T11:39:26.258038+00:00	`www.sicc-srl.com`
KLD Labs	US	2026-07-18T11:38:41.380160+00:00	`www.kldlabs.com`

Source: Ransomware.live leak-site monitoring (cached, offline-safe).

MITRE ATT&CK Groups ↗ Ransomware.live ↗ APT Theater →

📁 Case Management

Attach to case

Role

+ New case from this

🏹 Campaigns & malware

Campaigns →Malware families →Nation-State theater →Sanctions →Wanted & Rewards →

🏹 Add to case

Attach Qilin (Actor / APT) and pull all linked entities: pull linked

🗃 Data Management

+ Case + Campaign Watchlist Tag Save search Whitelist Export STIX/MISP Report

🧩 Advanced Capabilities

Link Analysis Pivot Explorer Timeline Threat Hunting Analytics Detection Rules Blockchain OSINT Pivot Passive DNS TAXII 2.1 MISP Feed Create Alert Rule NetFlow Coverage & Gaps

🧭 Intelligence disciplines

CYBINT →OSINT →HUMINT →GEOINT →

Live group profile & victims via Ransomware.live; ATT&CK technique hints are a static reference for well-known groups. All network calls cached & offline-safe.

Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook