Security Affairs • 5h
Arrest of Alleged Core Qilin Ransomware Member After Extradition
Japanese National Police Agency (NPA) detained a Russian national suspected of being a core member of the Qilin ransomware gang and facilitated his extradition to Germany, where he was arrested by the Federal Criminal Police Office (BKA). Qilin, also tracked as Agenda, operates as a ransomware‑as‑a‑service (RaaS) that encrypts files with AES‑256 and RSA key exchange, appending .qilin or .encrypted extensions and dropping a README_FOR_DECRYPT.txt note. Despite the arrest, the group’s activity continued, underscoring its decentralized structure and the limited impact of single‑node takedowns on RaaS operations.