ThreatVectr
Tag

#Qilin

7 stories taggedQilin.

A dim server room bathed in cold blue light, rows of rack-mounted servers with faint red status LEDs, one open cabinet showing tangled fibre cables, shallow dep
Ransomware

US firearms agency ATF confirms 'major incident' as Qilin ransomware gang lists it as a victim

The Bureau of Alcohol, Tobacco, Firearms and Explosives says a standalone system was breached. The Qilin ransomware crew added ATF to its dark web leak site the same day.

4 min read
Full-frame edge-to-edge photoreal editorial shot of a darkened server room corridor with a single rack door ajar, cool blue emergency lighting spilling across p
Ransomware

Ransomware gangs are going after VPNs, and an AI just ran its own attack

Ransomware attacks rose for the fourth month in a row in June, with criminals targeting the devices companies use to connect remote workers. A new AI-driven attack completed an entire break-in with no human at the keyboard.

3 min read
A server rack in a dimly lit data center, glowing amber and blue indicator lights reflecting off brushed-metal chassis surfaces, shallow depth of field on the f
Vulnerabilities

Hackers Are Actively Exploiting a Flaw in Check Point Security Software

A newly discovered hole in Check Point's network management tools let attackers log in as administrators without a password. Real attacks were already happening before the patch arrived.

3 min read
Photoreal editorial shot of a dimly lit server room with a rack-mounted enterprise firewall appliance glowing red on its status LEDs, blue network cables tangle
Ransomware

Qilin ransomware crew is breaking into Palo Alto VPNs through an unpatched flaw

Arctic Wolf says multiple Qilin affiliates are exploiting CVE-2026-0257 in Palo Alto Networks firewalls to encrypt whole networks. Over 167,000 VPN instances remain exposed online.

3 min read
Threat Intelligence

Mistic Backdoor Ties to IAB Selling Enterprise Footholds to Ransomware Gangs

A new in-memory backdoor named Mistic has been active since April, and the threat actor behind it has reportedly funneled access to Qilin, Akira, Black Basta, and others.

2 min read
Ransomware

The Gentlemen: A RaaS Affiliate That Grew Up and Wrote Its Own Worm

A double-extortion crew that started out renting LockBit, Qilin, and Medusa lockers has graduated to its own toolkit — including a payload with self-propagation.

3 min read
Vulnerabilities

Check Point Issues Emergency Patches After IKEv1 Auth Bypass Draws Qilin Affiliate

Two certificate-validation flaws in Check Point's VPN stack — one already exploited, one caught during the ensuing review — have prompted hotfixes across nine Quantum software versions.

2 min read
© 2026 Threat Vectr