earlier this month is likely to cause disruptions for London hospitals for months to come, according to the NHS. The Qilin ransomware gang was blamed for an attack on the pathology group, initially affecting five London hospitals. However, the number of...

as quickly as possible”, but has yet to reveal a timeline for recovery. The cyber attack was claimed by an affiliate of the Qilin ransomware-as-a-service group, listing the Japanese beer brand on its dark web leak site. The hacker claimed to have...

scene in September 2025, The Gentlemen has risen to the number two spot when it comes to victim count, behind only the Qilin ransomware-as-a-service operation. Its most recent Australian victim was Royal Foods, which confirmed it was investigating a...

as education and healthcare, there are many who see such sectors as prime targets for exploitation, as Beek points out. “Qilin, SafePay, and INC Ransom have been the most active in attacking the education sector over the last six months. We’ve observed...

Researchers at Rapid7 have put together a look back at the year that was, the threats that emerged, and how hackers gained access to their victims in 2024. The beginning of a new year is both a time to look ahead and a time of reflection, and looking...

This week’s essential cyber security podcast uncovers a new threat actor targeting a raft of Australian organisations and asks the important question: Is AI profitable yet? Hint – it is not. Cyber Daily’s David Hollingworth and Daniel Croft open the...

have been known to list victims incorrectly on their leak sites, especially in cases of mistaken identity. Last month, the Qilin ransomware operation mistakenly identified one of its victims as global training firm Richardson Sales Performance. However,...

techniques and malware variants.” “The persistence of MaaS/RaaS service models alongside the emergence of newer threats like Qilin ransomware underscores the continued need for adaptive, machine learning powered, security measures that can keep pace...

of leak posts made in the first three months of 2025: Clop 413 RansomHub 232 Babuk 168 Babuk-Bjorka 163 Akira 135 Lynx 115 Qilin 111 FunkSec 96 Cactus 94 Play 84 The big trends The Black Basta ransomware group appears to have self-destructed after its...

and SIM swapping attacks before using the malware of other prolific ransomware groups, including DragonForce, RansomHub, and Qilin. Now, following the wave of incidents on UK and US retailers, threat intelligence researchers from Google suspect that the...

a German woman in 2020 as a result of delayed treatment. The Synnovis ransomware attack occurred in June 2024 when the Qilin ransomware gang claimed to have exfiltrated 400 gigabytes from the company, which included patient names, dates of birth and NHS...

Rover is struggling to get its production lines running following a cyber attack at the beginning of the month, while the Qilin ransomware gang claimed to have stolen data from a design studio linked to Japanese car giant Nissan in August. This isn’t...

services. The ransomware threat actors most active in the region are KillSec, FunkLocker, Hunters International, and Qilin, with 63, 59, 35, and 34 victims, respectively. “Ransomware as a service (RaaS) providers FunkLocker and KillSec named a...

to accountability – and that’s when real resilience begins. Sam Salehi Managing director ANZ at Qualys The recent wave of Qilin ransomware attacks – impacting Australian organisations from construction and manufacturing to financial services –...

crossover between the education and healthcare sectors, leading some threat actors to be more active in both sectors. “Qilin, SafePay, and INC Ransom have been the most active in attacking the education sector over the last six months. We’ve observed...

as everyone else. Hollingworth then unpacks a hacking spree targeting Australian small and medium-sized businesses by the Qilin ransomware operation, as well as a hack that has taken a major Aussie poultry producer offline. The pair also discuss the...

targeting of widely deployed web applications. Ransomware activity remained fragmented across multiple operators, with Qilin leading leak-site activity with 357 darknet leak posts, followed by The Gentlemen with 206 and Akira with 174. The company also...

Who is Stormous? The Stormous group emerged in 2022 and has claimed more than 140 victims since it began operating. Like Qilin, Stormous provides ransomware-as-a-service capability to its affiliates in return for a share of any ransom paid. The group...

in providing fresh produce to independent and wholesale grocers. Late last month, Tripod Farmers was listed online by the Qilin ransomware group. According to threat feeds observed by Cyber Daily, the incident occurred around 17 February 2026,...

new to the ransomware scene, The Gentlemen has risen to the number two spot when it comes to victim count, behind the Qilin ransomware operation. Its most recent Australian victim was Mackay Sugar, whose operations were seriously disrupted for several...