The Evolution of Qilin RaaS
Essential information
- Published
- 08/10/2025 16:25
- Modified
- 08/10/2025 16:40
- Tags
- 2025-10-08 agenda alphvblackcat bitcoin fin12 kela nova onion phishing qilin raas ransomware ryuk supply chain attack tor wikileaks
- Related entities
- 5 observables, 1 intrusion sets (apt), 3 techniques (mitre), 2 malware
Description
Qilin ransomware is used for domain-wide encryption, and a ransom is then demanded for the decryption keys and/or to prevent the publication of the stolen data. Qilin affiliates are recruited from cybercrime forums to use the Qilin RaaS platform, which handles payload generation, the publication of stolen data, and ransom negotiations.