Qilin Targets Windows Hosts With Linux-Based Ransomware

The Qilin ransomware group has launched attacks on Windows hosts using a Linux-based binary, employing a cross-platform strategy that evades traditional Windows security measures. Identified by Trend Micro, Qilin utilizes legitimate remote management tools like AnyDesk and Splashtop to deploy ransomware, specifically targeting Veeam backup systems to compromise disaster recovery capabilities.

The group has affected over 700 organizations globally, primarily in the US, France, Canada, and the UK, and is known for its double extortion tactics. Security experts recommend enhancing defenses by securing remote access tools, monitoring for suspicious activity, and implementing phishing-resistant multi-factor authentication.