Skip to content

CyberSIXT Search

Threat actor · coverage timeline

Qilin

35 articles from 11 outlets between 18 Sep 2025 and 21 Oct. First reported by GBHackers. The busiest day was Tue 20 Oct, with 3 articles.

Articles: 35; all time · from 11 outlets
Days with coverage: 27; of 399 days · all time
Busiest day · all time: 3; articles on Tue 20 Oct
Last 7 days: 0.6a day; vs 0.1 a day · previous 7 days
First report: 18 Sep 2025; GBHackers
CVEs named: 5; 5 in CISA KEV · in these articles

Coverage over time

35 articles · 18 Sep 2025 – 21 Oct

18 Sep 2025First report18 Sep 2025 · GBHackers

Show as table

Qilin: articles per day
Day (UTC)	Articles	Outlets
Thu 18 Sep 2025	1	GBHackers 1
Wed 8 Oct 2025	3	The Hacker News 1, Security Affairs 1, DataBreaches 1
Tue 23 Dec 2025	1	SecurityOnline 1
Tue 31 Mar	1	Security Affairs 1
Sat 4 Apr	1	Security Affairs 1
Sun 19 Apr	1	DataBreaches 1
Mon 11 May	1	Check Point 1
Wed 3 Jun	1	SOCRadar 1
Mon 8 Jun	1	Dark Reading 1
Tue 9 Jun	3	SecurityWeek 1, Infosecurity 1, DataBreaches 1
Fri 3 Jul	1	Infosecurity 1
Tue 21 Jul	3	SecurityOnline 1, The Hacker News 1, Security Affairs 1
Thu 23 Jul	1	SecurityWeek 1
Mon 27 Jul	1	Security Affairs 1
Fri 31 Jul	1	DataBreaches 1
Fri 7 Aug	1	Infosecurity 1
Mon 10 Aug	1	Securelist 1
Thu 27 Aug	1	DataBreaches 1
Fri 28 Aug	1	SecurityWeek 1
Thu 10 Sep	1	SecurityWeek 1
Fri 11 Sep	1	Security Affairs 1
Tue 6 Oct	1	DataBreaches 1
Wed 7 Oct	1	SecurityWeek 1
Fri 9 Oct	1	Security Affairs 1
Mon 12 Oct	1	Infosecurity 1
Tue 20 Oct	3	SecurityOnline 1, The Hacker News 1, DataBreaches 1
Wed 21 Oct	1	Infosecurity 1

Articles

35 articles

Wed 21 Oct1 article

12:22
Ransomware Attacks Jump 50% as Data Theft Replaces EncryptionInfosecurity

Tue 20 Oct3 articles

16:48
Ransomware gangs exploit patched Palo Alto VPN security flawDataBreaches
16:13
Qilin and INC ransomware gangs exploit Palo Alto VPN flaw to bypass MFAThe Hacker News
10:43
Ransomware gangs bypass MFA through PAN OS VPN flaw CVE-2026-0257SecurityOnline

Mon 12 Oct1 article

09:46
Ransomware gangs exploit Palo Alto VPN flaw months after patch releaseInfosecurity

Fri 9 Oct1 article

20:00
Germany Arrests Suspected Qilin Ransomware Leader After ExtraditionSecurity Affairs

Wed 7 Oct1 article

13:54
Alleged Qilin ransomware operator extradited from Japan to GermanySecurityWeek

Tue 6 Oct1 article

12:29
Japan Extradites Suspected Qilin Ransomware Member to GermanyDataBreaches

Fri 11 Sep1 article

10:37
Cisco Firewall Flaws Exploited to Deploy Qilin RansomwareSecurity Affairs

Thu 10 Sep1 article

10:30
Cisco Firewall Flaw Exploited by Sandworm and Qilin RansomwareSecurityWeek

Fri 28 Aug1 article

14:18
ATF calls Qilin ransomware breach a major incidentSecurityWeek

Thu 27 Aug1 article

17:25
Qilin ransomware claims ATF hack, agency says breach isolatedDataBreaches

Mon 10 Aug1 article

10:17
Kaspersky blocks 400M attacks in Q2 2026 amid ransomware surgeSecurelist

Fri 7 Aug1 article

08:31
Ransomware Surges in July After Q2 LullInfosecurity

Fri 31 Jul1 article

17:20
LockBit5, Qilin and The Gentlemen lead Italy ransomware H1 2026DataBreaches

Mon 27 Jul1 article

07:12
LockBit5 and Qilin Lead Ransomware Attacks Against Italian OrganizationsSecurity Affairs

Thu 23 Jul1 article

09:09
Check Point Zero Day CVE-2026-16232 Exploited for Auth BypassSecurityWeek

Tue 21 Jul3 articles

17:01
Qilin Ransomware Exploits CVE-2026-0257 in Palo Alto VPNSecurity Affairs
14:10
Qilin ransomware exploits PAN-OS auth bypass to breach networksThe Hacker News
03:32
Qilin ransomware exploits CVE-2026-0257 in Palo Alto firewallSecurityOnline

Fri 3 Jul1 article

13:11
Qilin Tops Ransomware Market Rising Competition, Analysts SayInfosecurity

Tue 9 Jun3 articles

12:31
U.S. Agencies Ordered to Patch CVE-2026-50751 in Check Point VPNDataBreaches
09:50
Check Point Warns Critical Auth Bypass Bug Exploited in the WildInfosecurity
09:50
Check Point VPN Zero-Day Exploited in Qilin Ransomware AttacksSecurityWeek

Mon 8 Jun1 article

20:57
Check Point warns of IKEv1 flaw linked to Qilin ransomwareDark Reading

Wed 3 Jun1 article

12:06
Brazil faces surge in ransomware as top threat actors target 2026SOCRadar

Mon 11 May1 article

10:27
Qilin Tops Ransomware List as Gentlemen Surge in Q1 2026Check Point

Sun 19 Apr1 article

18:08
NHS Trust still using paper after Qilin ransomware hit SynnovisDataBreaches

Sat 4 Apr1 article

18:10
Qilin Ransomware Claims Data Theft from German Party Die LinkeSecurity Affairs

Tue 31 Mar1 article

08:06
Qilin Ransomware allegedly breached chemical manufacturer giant Dow IncSecurity Affairs

Tue 23 Dec 2025 20251 article

01:25
A Desperate Cartel: Inside the Unlikely Alliance of Qilin, DragonForce, and a Fading LockBitSecurityOnline

Wed 8 Oct 2025 20253 articles

19:50
DragonForce, LockBit, and Qilin, a new triad aims to dominate the ransomware landscapeDataBreaches
19:20
DragonForce, LockBit, and Qilin, a new triad aims to dominate the ransomware landscapeSecurity Affairs
13:45
LockBit, Qilin, and DragonForce Join Forces to Dominate the Ransomware EcosystemThe Hacker News

Thu 18 Sep 2025 20251 article

13:36
Qilin Ransomware Attack Impacts 104 Organizations in AugustGBHackers · first report