Qilin

☆ pin

Also known as Agenda, Pestilent Mantis

Reports

378

First seen

Aug 19, 2025

Last seen

Aug 14, 2026

Motivation

Financial

Relationships

Filled ◆ = CVE exploited in the wild. Entities that appear together in Signalis reporting — co-mention, not confirmed collaboration. Reports naming many actors at once (weekly roundups) are excluded from relationship edges.

Targeting

Sectors

Manufacturing ×46 Other ×32 Healthcare ×27 Professional Services ×23 Retail & E-commerce ×17 Education ×12 Media & Entertainment ×9 Financial Services ×8

Victim regions

×3

×69

United States×69

Germany×13

France×10

Malaysia×4

Australia×4

Canada×4

Italy×3

Argentina×3

Victim country, only when stated. Corpus is predominantly English-language reporting, so US/EU coverage is overweighted relative to true victim distribution.

Top ATT&CK techniques

T1486 Data Encrypted for Impact ×22T1190 Exploit Public-Facing Application ×21T1566 Phishing ×17T1195 Supply Chain Compromise ×10T1059 Command and Scripting Interpreter ×9T1041 Exfiltration Over C2 Channel ×8T1021 Remote Services ×7T1078 Valid Accounts ×7T1219 Remote Access Software ×7T1133 External Remote Services ×7T1005 Data from Local System ×6T1567 Exfiltration Over Web Service ×5

Indicators

domain ×359cve ×175filename ×77ip_v4 ×2hash_sha256 ×1hash_sha1 ×1

Indicator values are available on Pro and via the API.

Recent reports

High

Qilin

Relationships

Targeting

Top ATT&CK techniques

Indicators

Associated CVEs

Recent reports

Qilin ransomware gang publishes Ferrari Mangimi SRL as victim

Qilin ransomware gang publishes Connections as new victim

Qilin ransomware claims Aletex Group as victim

Qilin ransomware gang publishes Radiant as new victim

Qilin ransomware gang publishes Lercher Werkzeugbau as victim

Qilin ransomware gang publishes new victim on leak site

Qilin ransomware gang publishes PenLink as victim

Qilin ransomware gang publishes Urban Worldwide as victim

ThreatsDay: GhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 17 More Stories

Qilin ransomware gang publishes D & J Beverage Service as victim

State of Ransomware Q2 2026: Concentration Shifts as Top Groups Dominate 57.6% of Victims

Qilin publishes United Association Local Union 345 as ransomware victim

Qilin ransomware publishes new victim

Qilin ransomware gang publishes G.M.A. Grandi Marche Automobili as victim

Qilin ransomware gang claims Crown Group breach

Qilin ransomware gang publishes Service Evaluation Concepts as victim

Qilin ransomware gang publishes Tommer Construction as victim

Qilin publishes HIGEN MOTOR as ransomware victim

Weekly Security Recap: AI Model Poisoning, Metabase 0-Day, Supply-Chain Worms, and Router Backdoors

Qilin ransomware gang publishes City of Winchester as victim

Qilin Ransomware Group Claims B Wright Drywall as Victim

IT threat evolution in Q2 2026: Ransomware, miners, and vulnerability exploitation

Qilin ransomware gang publishes Synergy Interactive as victim

Qilin ransomware gang claims Energetic Development Corp breach

Qilin publishes Panda Logistics Taichung Branch as ransomware victim

Qilin ransomware gang publishes East Field Corporation as victim

Qilin ransomware gang publishes Chun Tai Sing Chemical Industry as victim

Qilin ransomware publishes pm-energy Die Solarexperten as victim

Qilin ransomware gang publishes Harplast SRL as victim

Qilin ransomware gang publishes Price Shoes as victim