Qilin

☆ pin

Also known as Agenda, Pestilent Mantis

Reports

628

First seen

Aug 19, 2025

Last seen

Oct 16, 2026

Motivation

Financial

Relationships

Filled ◆ = CVE exploited in the wild. Entities that appear together in Signalis reporting — co-mention, not confirmed collaboration. Reports naming many actors at once (weekly roundups) are excluded from relationship edges.

Targeting

Sectors

Manufacturing ×74 Other ×55 Healthcare ×33 Professional Services ×33 Retail & E-commerce ×24 Financial Services ×21 Education ×18 Government ×14

Victim regions

×5

×99

United States×99

France×19

Germany×19

Italy×12

Japan×9

Canada×7

Mexico×6

Argentina×5

Victim country, only when stated. Corpus is predominantly English-language reporting, so US/EU coverage is overweighted relative to true victim distribution.

Top ATT&CK techniques

T1486 Data Encrypted for Impact ×31T1190 Exploit Public-Facing Application ×28T1566 Phishing ×20T1078 Valid Accounts ×14T1041 Exfiltration Over C2 Channel ×11T1059 Command and Scripting Interpreter ×11T1195 Supply Chain Compromise ×10T1021 Remote Services ×10T1133 External Remote Services ×10T1219 Remote Access Software ×8T1567 Exfiltration Over Web Service ×8T1555 Credentials from Password Stores ×7

Indicators

domain ×598cve ×206filename ×84hash_sha256 ×6hash_md5 ×5ip_v4 ×2hash_sha1 ×1

Indicator values are available on Pro and via the API.

Recent reports

High

Qilin

Relationships

Targeting

Top ATT&CK techniques

Indicators

Associated CVEs

Recent reports

Qilin ransomware gang publishes Via Credit Union as victim

Qilin ransomware gang publishes Via Credit Union as victim

Qilin ransomware gang claims Keio Corporation as victim

Qilin ransomware gang publishes Keio Corporation as victim

Qilin ransomware gang publishes Kemlows Diecasting Products Limited as victim

Qilin ransomware gang publishes Kemlows Diecasting Products Limited as victim

Qilin ransomware publishes Telcoe Federal Credit Union as victim

Qilin ransomware gang publishes Segres Systec as victim

Qilin ransomware gang publishes Segres Systec as victim

Qilin ransomware publishes Shield Wall Systems as victim

Qilin ransomware gang publishes The Excalibur Group as victim

Qilin publishes The Excalibur Group as ransomware victim

Qilin publishes KD Corp as ransomware victim

Qilin ransomware gang claims Hocon Gas as new victim

Qilin ransomware gang publishes HyperGen as new victim

Qilin ransomware gang publishes HyperGen as new victim

Qilin ransomware gang publishes Chattanooga Shooting Supplies as victim

Qilin ransomware gang publishes Chattanooga Shooting Supplies as victim

Qilin ransomware claims Commune Du Tampon as new victim

Qilin ransomware gang publishes Commune Du Tampon as victim

Qilin ransomware gang claims Brame Telecom victim

Qilin ransomware gang publishes Brame Telecom as victim

Qilin ransomware gang publishes MOA Architecture as victim

Qilin ransomware gang publishes MOA Architecture as victim

Qilin ransomware claims Joliet Public Schools District 86

Qilin ransomware gang publishes The Golden Legacy Financing as victim

Qilin ransomware claims Iliff, Meredith, Wildberger & Brennan, P.C.

Qilin ransomware gang publishes Milstein Siegel, LLC as victim

Qilin ransomware publishes Comisión Municipal de Agua Potable y Alcantarillado de Victoria as victim

Qilin publishes RingSide Creative as ransomware victim