Qilin Ransomware and the Ghost Bulletproof Hosting Conglomerate

Resecurity has published a report titled “Qilin Ransomware and the Ghost Bulletproof Hosting Conglomerate,” which examines the Qilin RaaS operation’s reliance on bullet-proof-hosting infrastructures. According to Resecurity, Qilin is one of the most prolific threat groups extorting organisations today and recently claimed responsibility for the September ransomware attack that crippled operations and manufacturing functions at Japanese brewing conglomerate Asahi Group Holdings for nearly two weeks.

The analysis highlights how Qilin’s use of prominent BPH providers positions them at the heart of a network of rogue services designed to be resilient to abuse complaints and law enforcement intervention. These BPH services enable clients to host content with minimal or no oversight, often via anonymous, geographically distributed shell companies in pro-secrecy jurisdictions.

The piece argues that such malignant infrastructures, supported by secrecy regimes, help destructive ransomware campaigns persist undisturbed for prolonged durations.