Qilin Ransomware’s Resilience Exposed: Bulletproof Hosting Network Underpins Asahi Group Holdings Attack

According to Resecurity, Qilin Ransomware’s resilience hinges on a sprawling bulletproof hosting (BPH) ecosystem that underpins its ransomware-as-a-service operations and enables the group to target global enterprises. The report ties Qilin’s infrastructure to networks in Russia, Hong Kong, Cyprus, and the UAE and links it to sanctioned providers that evade law enforcement oversight.

The gang claimed responsibility for the September 29, 2025 attack on Asahi Group Holdings in Japan, disrupting digital logistics and brewing operations across 30 factories, with 27 GB of data exfiltrated and orders forced to revert to manual processing. Resecurity notes that the attackers sought to monetise stolen data, and that the group attempted to sell Asahi’s data for $10 million in early October.

The investigation also highlights Qilin’s rapid expansion, with more than 50 new victims across 15 countries reported in October 2025, including municipalities and energy firms.