Qilin

Also known as Pestilent Mantis, Agenda

Reports

161

First seen

Aug 19

Last seen

Jun 25

Motivation

extortion, financial, financial extortion

Targeting

Sectors

manufacturing ×18healthcare ×16other ×12professional services ×12retail ecommerce ×7education ×4financial services ×3media entertainment ×3

Victim regions

United States ×33Canada ×3Malaysia ×3Germany ×3France ×2Spain ×2Libya ×1Taiwan ×1

Top ATT&CK techniques

T1486 Data Encrypted for Impact ×13T1190 Exploit Public-Facing Application ×12T1566 Phishing ×11T1195 Supply Chain Compromise ×8T1078 Valid Accounts ×6T1021 Remote Services ×6T1041 Exfiltration Over C2 Channel ×6T1059 Command and Scripting Interpreter ×5T1133 External Remote Services ×5T1562.001 Impair Defenses: Disable or Modify Tools ×4T1105 Ingress Tool Transfer ×4T1567 Exfiltration Over Web Service ×4

Indicators

domain ×145filename ×75cve ×64hash_sha256 ×1ip_v4 ×1hash_sha1 ×1

Indicator values are available on Pro and via the API.

Recent reports

High

Qilin

Targeting

Top ATT&CK techniques

Indicators

Associated CVEs

Recent reports

Check Point VPN Authentication Bypass: Six-Week Exploitation Window and Perimeter Defense Limitations

Qilin ransomware gang publishes ISOPLUS as new victim

Qilin ransomware gang publishes Cash Canada as victim

Qilin ransomware gang claims Lee International as new victim

Qilin ransomware gang publishes Schumacher Homes as victim

Qilin ransomware gang claims Central Bank of Libya as new victim

Qilin ransomware gang publishes Taiwan Sintong Machinery Co., Ltd as victim

Qilin ransomware gang publishes Sivatel Bangkok as victim

Qilin ransomware gang publishes Tri-tec as victim

Qilin ransomware gang claims Florida Engineering Services victim

Qilin ransomware gang publishes Pacific Lamp & Supply as victim

Qilin ransomware gang publishes Roth Industries as victim

Qilin ransomware gang publishes Sparkle Pools as new victim

Qilin ransomware gang publishes PJ Daly Contracting as victim

Qilin ransomware gang publishes Commune d'Eyguires as victim

Qilin ransomware publishes THL Project Management Sdn. Bhd. as victim

Qilin ransomware group claims Homes By J Anthony as victim

Qilin ransomware gang publishes ATCOM Outsourcing as victim

Qilin publishes Grupo Bimbo (Skupina Don Don) as ransomware victim

Qilin ransomware gang publishes Makel Companies Group as victim

Qilin ransomware gang claims Golfview Developmental Center victim

Qilin ransomware gang publishes Misericórdia de Santo Tirso as victim

Qilin ransomware group publishes Q Link Wireless as victim

Qilin ransomware publishes new victim: Cng Ty Cp T Vn Xd Tng Hp

Qilin ransomware gang publishes MAVA Healthcare as victim

Qilin ransomware gang publishes Grupo Indi as new victim

Qilin ransomware claims Can Healthcare Group as victim

Weekly Cybersecurity Recap: Chrome 0-Day, Oracle PeopleSoft Exploit, Supply Chain Attacks

Check Point Threat Intelligence Report – 15 June 2026

Qilin ransomware gang publishes DISTINET MURCIA SL as victim