CyberSecurity news
FlagThis - #qilin
|
@kirbyidau.com
//
MKA Accountants, a Victorian accounting firm, has confirmed it fell victim to a ransomware attack by the Qilin group. The incident, which occurred in May 2025, resulted in the publication of sensitive company documents on Qilin's leak site. The stolen data included internal correspondence, financial statements, and insurance information, highlighting the severity of the breach and the potential impact on the firm's operations and client relationships. This attack underscores the growing threat posed by ransomware groups to organizations of all sizes, regardless of their industry.
The Qilin ransomware group has been rapidly gaining prominence in the cybercrime landscape. As established players like RansomHub and LockBit face internal turmoil and operational setbacks, Qilin has emerged as a technically advanced and full-service cybercrime platform. Recent reports indicate that Qilin is actively recruiting affiliates, possibly absorbing talent from defunct groups, and bolstering its capabilities to conduct sophisticated ransomware attacks. This rise in prominence positions Qilin as a major player in the evolving ransomware-as-a-service (RaaS) ecosystem, posing a significant threat to businesses worldwide. To further pressure victims into paying ransoms, Qilin now offers a "Call Lawyer" feature within its affiliate panel. This addition aims to provide affiliates with legal counsel during ransom negotiations, potentially intimidating victims and increasing the likelihood of payment. Furthermore, Qilin provides other services to help affiliates maximize their success. This includes spam services, PB-scale data storage, a team of in-house journalists, and even the ability to conduct distributed denial-of-service (DDoS) attacks, positioning Qilin as a comprehensive cybercrime operation and increasing it's market share.
Share:
References :
Classification:
Graham Cluley@Blog RSS Feed
//
The Qilin ransomware group is introducing a new tactic to pressure victims into paying larger ransoms. They are now offering a "Call Lawyer" button within their affiliate panel, providing legal counsel to cybercriminals attempting to extort money. This feature aims to give affiliates an edge in ransom negotiations by providing them with on-call legal support. Qilin believes that the presence of a lawyer in communication with victims will increase the likelihood of a successful ransom payment due to the potential legal ramifications and associated costs for the victim company.
Qilin's legal assistance service offers several advantages for its affiliates, including legal assessments of stolen data, classification of legal violations, and evaluation of potential damages. It also provides guidance on how to inflict maximum economic damage on a victim company if they refuse to pay the ransom. This addition is part of Qilin's effort to position itself as a full-service cybercrime platform, offering extensive support options and robust solutions for highly targeted ransomware attacks. This development indicates a shift in the cybercrime landscape, with ransomware groups like Qilin attempting to mimic legitimate business tactics to increase their success rates. Qilin has become a prominent player in the ransomware-as-a-service (RaaS) market, attracting affiliates from other groups and leading in the number of victims targeted in recent months. The group's mature ecosystem, advanced evasion features, and comprehensive operational features position it as a significant threat in the cybercrime world.
Share:
References :
Classification:
Dissent@DataBreaches.Net
//
The Qilin ransomware group's cyberattack on Synnovis, an NHS vendor, has had a devastating impact, directly harming 170 patients. The attack, which occurred sometime before June 18, 2025, led to the cancellation of over 10,000 appointments across two London NHS trusts. Additionally, numerous GP practices in London faced disruptions in their ability to order blood tests for patients, further compounding the healthcare crisis. The severity of the harm varied, with one case classified as "severe," 14 as "moderate," and the remaining cases categorized as "low harm."
This recent report updates earlier estimates from January 2025, which had reported two cases of major harm, 11 cases of moderate harm, and over 120 cases of minor harm. The continued impact highlights the vulnerability of healthcare infrastructure to cyber threats and the potential for patient care to be severely compromised. The attack on Synnovis underscores the critical need for robust cybersecurity measures within the healthcare sector, especially among third-party vendors that handle sensitive patient data. Qilin is rapidly ascending in the ransomware landscape amid the decline of other major players such as RansomHub and LockBit. A recent report from the Cybereason Security Services Team highlights a "turbulent realignment" within the ransomware world. This shift is driven by factors like unexpected takeovers, public defacements, and leaks of critical infrastructure data. MKA Accountants, an Australian accounting firm, has also confirmed a Qilin ransomware attack, where the gang published internal documents and financial statements. This incident highlights Qilin's broad targeting scope and increasing prominence as a full-service cybercrime platform.
Share:
References :
Classification:
|