#2
Krebs on Security
threat-intel
November 11, 2026 at 18:06 UTC
Who Runs the Ransomware Group Qilin?
By BrianKrebs
AI Summary
Krebs on Security investigates the administrator of Qilin ransomware, identified as a 36-year-old man living in St. Petersburg, Russia, whose operational security mistakes over the past decade exposed his identity. Qilin has become the world's most active ransomware affiliate program, claiming at least 365 victim organizations in just the past three months, making threat-actor attribution here directly actionable for incident responders and law enforcement.
Relevance score: 90.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →